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FOREWORD 


This  is  the  first  of  three  reports  to  be  submitted  under  Contract  No. 
DAAA09-51 -0-3006  being  conducted  by  IIT  Research  Institute,  Chicago,  Illinois, 
for  the  U.  S.  Army  ARRCOM,  Rock  Island,  Illinois.  This  report  describes  the 
results  of  a  hazards  analysis  of  the  steam  and  hydraulic  systems  (Priority  1) 
at  the  Western  Area  Demilitarization  Facility  at  Hawthorne,  Nevada.  The  steam 
and  hydraulic  systems  include  the  Washout/Steamout  Building,  the  Refining 
Building,  the  Bulk  Incinerator  and  the  Process  Water  Treatment  Plant.  Reports 
to  be  submitted  at  a  later  date  include  hazards  analyses  of  the  mechanical  de¬ 
militarization  Systems  (Priority  2  Report  -  Preparation  Building,  Mechanical 
Removal  Building,  and  the  Large  Cells),  and  the  incineration  systems,  the  off¬ 
loading  dock,  and  the  driverless  tractor  system  (Priority  3).  The  Priority  1 
Report  is  submitted  in  two  volumes.  Volume  2  containing  fault  tree  diagrams 
for  the  systems  evaluated. 

The  primary  IIT  Research  Institute  project  team  consisted  of  Ronald 
Pape,  Edmund  Swider,  Charles  Heilker,  Kim  Mniszewski,  Dwayne  Eacret,  and 
Cindy  Marrazzo.  In  addition,  Peter  Milhalkanin  provided  part  reliability  data, 
and  Daniel  Lezotte  and  Harold  Wakeley  provided  human  error  rates.  Mr.  Thomas 
Grady,  a  private  consultant  with  considerable  experience  in  explosive  and 
propellant  operations,  helped  scrutinize  the  results  of  the  analysis. 
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1.  INTRODUCTION 


This  report  contains  the  results  of  a  hazards  analysis  of  the  steam  and 
hydraulic  systems  at  the  Western  Area  Demilitarization  Facility  (WADF)  at 
Hawthorne,  Nevada.  The  analyses  have  been  divided  into  five  plant  areas: 

1.  Washout/Steamout  Building  North  Tower 

2.  Washout/Steamout  Building  South  Tower 

3.  Refining  Building 

4.  Bulk  Explosives  Disposal  Facility 

5.  Process  Water  Treatment  Plant 

The  methodology  used  was  a  combination  of  failure  modes  and  effects 
analysis  (FMEA)  and  fault  tree  analysis  (FTA),  with  quantification  accomplished 
through  the  use  of  a  fault  tree  computer  model.  These  techniques  are  described 
in  Section  2  of  this  report. 

The  hazards  analysis  that  was  conducted  produced  two  types  of  results. 
First,  the  scenarios  that  can  lead  to  a  hazardous  outcome  were  identified  by 
constructing  fault  tree  logic  diagrams  for  each  plant  section.  Such  scenarios 
are  chains  of  events  or  combinations  of  events  that  must  occur  together  to 
cause  the  outcome  of  concern.  For  example,  for  an  operator  to  become  burned 
by  touching  a  hot  surface,  several  things  must  happen: 

1.  the  surface  must  be  sufficiently  hot  to  burn  someone,  and 

2.  an  operator  must  touch  the  hot  surface 

Both  of  these  events  are  necessary  in  order  for  the  operator  to  become  burned. 
The  combination  of  events  is  a  scenario.  To  evaluate  whether  such  a  scenario 
is  significant,  "probability  of  occurrence"  values  are  derived  for  each  event 
in  the  scenario,  thereby  making  it  possible  to  compute  the  overall  scenario 
probability  of  occurrence.  Scenario  probabilities  are  derived  in  terms  of 
probability  per  year,  or  expected  frequency  of  occurrence  averaged  over  an 
extremely  long  time  frame. 

All  the  scenarios  for  the  specific  plant  section  are  then  compared  based 
on  their  derived  probabilities  per  year.  Naturally,  those  scenarios  with  the 
highest  probability  values  are  most  critical  and  must  be  addressed  first. 
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It  should  be  noted  that  the  WADF  operation  is  inherently  hazardous  in  several 
respects.  First,  the  energetic  materials  being  processed  are  aged  and  likely 
to  become  contaminated.  Experimental  data  on  the  effects  of  aging  is  limited, 
but  the  data  that  is  available  shows  that  aging  and  contaminants  can  drastically 
decrease  the  critical  temperature  for  runaway  reaction  and  can  increase  the 
sensitivity  of  materials  to  stimuli  such  as  impact.  This  may  be  due  to  local 
inhibition  of  heat  transfer  or  a  catalytic  effect. 

In  addition,  many  of  the  operations  at  WADF  are  labor  intensive,  and  errors 
made  by  people  are  the  most  common  cause  of  problems  in  process  operations.  Over 
the  years,  there  will  be  considerable  fixture  modifications  required  to  handle 
new  materials  or  items.  Each  time  there  is  such  a  change  in  the  system,  there  is 
an  opportunity  for  errors  to  be  made  creating  new  potential  hazards. 

The  results  of  the  analyses  are  summarized  in  Section  3  for  each  of  the  plant 
areas.  The  analysis  was  iterative  in  that  conservative  assumptions  were  used 
initially  wherever  possible,  but  these  assumptions  had  to  be  refined  for  high 
probability  scenarios  to  evaluate  their  credibility  more  realistically  in  the 
final  answers.  The  major  problem  areas  are  thus  presented  in  Section  3  with 
comments  on  their  credibility  and/or  the  major  unknowns  highlighted. 

The  appendices  provide  more  detailed  discussion  in  four  areas.  Appendix  A 
presents  the  electrostatics  hazard  model  used  to  evaluate  the  electrostatic  dis¬ 
charge  (ESD)  scenarios.  Appendix  B  provides  the  results  of  a  survey  of  available 
compatability  data  conducted  to  help  identify  types  of  problems  that  can  be 
expected  at  WADF,  however,  the  compatability  summary  should  neither  be  interpreted 
as  complete  nor  used  to  identify  the  specific  compatability  problems  that  may  be 
of  concern  at  WADF.  Appendix  C  discusses  the  rationale  used  to  evaluate  the 
potential  for  runaway  reaction  in  liquid  explosive  holding  vessels,  such  as  melt 
kettles  or  the  separator  vessel  in  the  Washout/Steamout  North  Tower.  Runaway 
reaction  was  identified  as  the  dominant  hazard  in  the  North  Tower  and  the  Refining 
Building.  In  Appendix  D,  a  number  of  specific  scenarios  from  the  North  Tower 
analysis  are  discussed  and  the  basic  event  probabilities  are  provided  for  each 
component  in  the  scenarios.  These  North  Tower  example  cases  are  presented  to 
provide  the  type  of  thought  process  used  to  derive  the  expected  frequency  of  occurrence. 
Finally,  Appendix  E  tabulates  accident  reports  obtained  from  the  DoD  Explosives 
Safety  Board  Files.  This  table  is  provided  to  give  the  reader  background  on  what 
types  of  incidents  have  occurred  historically. 
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2.  HAZARDS  ANALYSIS  APPROACH 


In  this  section  the  hazards  analysis  approach  used  to  evaluate  the 
Priority  1  systems  will  be  summarized.  Basically,  the  following  steps  were 
used  in  the  analyses: 

a)  Collect  Available  Information 

b)  Review  Information/Learn  System 

c)  Conduct  a  Failure  Modes  and  Effects  Analysis  (FMEA) 

d)  Develop  Fault  Tree  Logic  Diagrams  for  System  (FT A) 

e)  Quantify  Fault  Tree  (derive  scenario  probabilities) 

f)  Interpret  and  Summarize  the  FTA  Results 

For  the  purposes  of  this  program,  the  failure  modes  and  effects  analyses  served 
to  identify  types  of  consequences  and  types  of  scenarios  to  be  expected  for 
different  areas  of  the  WADF.  The  FMEA's  were  used  to  learn  the  system  and 
guide  the  development  of  the  fault  trees.  Fault  tree  analysis  was  the  pri¬ 
mary  methodology  used  to  identify  and  quantify  credible  hazards  at  the  facility. 
The  FMEA  and  Fault  Tree  methods  are  described  below: 

2.1  FAILURE  MODES  AND  EFFECTS  ANALYSIS  (FMEA) 

Failure  Modes  and  Effects  Analysis  is  a  relatively  simple  and  direct 
approach  for  identifying  basic  sources  of  failure  and  their  consequences. 

This  method  is  not  rigid  and  can  be  used  for  widely  differing  applications. 

It  is  especially  applicable  for  identifying  sources  of  malfunctions  in  hard¬ 
ware  systems  or  in  process  equipment.  The  primary  purpose  of  the  analysis  is 
to  identify  and  remove  failures  that  can  cause  hazards.  However,  as  a  side 
benefit,  the  analysis  also  leads  to  the  identification  of  failures  that  are 
in  themselves  not  hazardous  but  might  affect  the  reliability  of  the  functioning 
of  a  system.  The  results  of  such  an  analysis  also  may  serve  as  an  input  to 
a  Fault  Tree  Analysis,  although  more  generally  the  two  methods  are  used 
independently. 

A  Failure  Modes  and  Effects  Analysis  is  carried  out  by  filling  in  a  table 
having  column  headings  such  as  the  ones  shown  in  Figure  1.  This  format  is 
the  one  used  for  the  Priority  1  systems.  The  first  two  columns  list  the 
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system  parts  and  procedure  steps  obtained  from  the  available  drawings,  written 
descriptions,  etc.  The  third  column  is  used  to  identify  the  different  possible 
failure  modes  for  each  entry  listed  in  the  previous  columns.  There  may  be 
several  entries  in  column  3  for  each  system  pajrt  or  task.  Given  these  initial 
failures,  the  possible  chains  of  events  were  described  in  the  next  column, 
and  the  ultimate  effect  on  the  system  was  given  in  the  last  column.  The 
Priority  1  FMEA  tables  were  relatively  formal  and  time  consuming  to  produce. 
These  tables  were  used  primarily  as  "shopping  lists"  for  fault  tree  development, 
a  function  not  necessitating  the  formal  presentation.  In  Priority  2  and  3 
analyses  a  less  formal  FMEA  presentation  will  be  utilized,  although  this  method 
will  still  be  used  to  provide  the  basis  for  fault  tree  diagramming. 

2.2  FAULT  TREE  ANALYSIS 

A  powerful  method  that  has  developed  rapidly  since  1962  is  the  Fault  Tree 
Analysis.  This  method  may  be  viewed  as  a  systematic  and  comprehensive  investi¬ 
gation  of  a  postulated  accident  before  it  occurs.  The  term  "accident"  in  this 
case  is  used  to  signify  any  kind  of  undesired  event.  The  procedure  is  to 
define  this  undesired  event  and  to  identify  all  immediate  causes  that  could 
have  brought  it  about.  These  causes,  in  turn,  are  traced  back  through  the 
system  until  one  arrives  at  the  ultimate  causes  that  initiated  the  sequence  of 
events  that  led  to  the  undesired  event.  These  ultimate  causes  may  be  failures 
of  individual  hardware  components,  or  human  errors,  or  other  factors  which 
either  singly  or  in  combination  could  have  initiated  the  hazardous  action. 

An  immediate  result  of  such  an  analysis  is  a  highly  visible  graphical 
representation  of  all  basic  failures  and  the  paths  whereby  they  can  combine 
to  create  the  undesired  event.  The  method  also  can  be  used  quantitatively. 

If  data  are  available  for  the  probability  of  occurrence  of  the  basic  failures, 
it  is  possible  to  calculate  the  probability  of  occurrence  of  the  undesired 
event.  In  doing  so  it  is  also  possible  to  identify  those  basic  failures  that 
are  most  critical,  and  the  most  critical  sets  of  events  (scenarios),  so 
priorities  can  be  established  for  taking  corrective  action. 

An  analysis  begins  by  identifying  an  Undesired  Event  whose  causes  are  to 
be  traced.  Graphically,  this  event  is  placed  at  the  top  of  the  page  and 
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represents  the  base  of  a  tree  whose  branches  are  developed  and  extend  down¬ 
ward.  Once  the  undesired  event,  also  called  a  Top  Event  is  specified,  it  is 
necessary  to  identify  the  immediate  causes  which  directly  could  cause  this  top 
event.  Each  of  these  causative  events,  in  turn,  is  further  broken  down  into 
subordinate  events. 

This  process  is  continued  until  one  arrives  at  basic  input  events  that 
cannot  be  broken  down  further,  or  for  which  probability  data  are  available 
so  there  is  no  need  to  go  further.  This  process  creates  a  diagram  which 
resembles  a  tree  whose  branches  extend  and  spread  out  downward,  with  each 
branch  terminating  in  basic  input  events. 

Figure  2  illustrates  the  diagrammatic  arrangement  of  a  fault  tree,  and 
Figure  3  identifies  the  geometric  symbolism  that  is  commonly  used  in  fault 
tree  construction.  It  is  to  be  noted  that  a  fault  tree  consists  of  three 
essential  elements  --  input  events,  logic  gates,  and  output  events.  The  basic 
logic  gates  are  of  two  kinds,  namely  OR  gates  and  AND  gates.  If  an  output 
event  can  be  caused  by  one  or  more  input  events,  either  when  each  acts  by 
itself,  or  when  they  act  together,  these  input  events  pass  through  an  OR 
gate.  On  the  other  hand,  if  an  output  event  can  be  caused  only  when  all  input 
events  must  act  in  combination,  these  input  events  pass  through  an  AND  gate. 

This  concept  is  illustrated  in  Figure  4  where  the  top  event  is  defined 
as  the  lighting  of  the  light  bulb.  For  the  circuit  diagram  which  shows  all 
the  switches  arranged  in  series,  all  three  must  be  closed  for  the  light  to  stay 
lit.  In  the  logic  diagram  for  this  arrangement,  these  three  switches  are 
shown  connected  to  an  AND  gate.  In  the  other  circuit  diagram,  where  the  three 
switches  are  arranged  in  parallel,  it  is  evident  that  the  closing  of  any  one 
switch  would  be  sufficient  to  light  the  bulb.  The  logic  diagram  for  this  case 
shows  the  three  input  events  to  pass  through  an  OR  gate.  If  the  probability 
for  each  of  the  switches  A,  B,  and  C  remaining  closed  were  known,  it  would  be 
possible  to  determine  the  probability  of  the  bulb  remaining  lit  for  each  circuit. 
That  is,  the  symbolic  logic  relationships  can  be  converted  to  algebraic  ex¬ 
pressions  for  numerical  calculation. 
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R  Logic  Gate 


Restriction 


Figure  2  Diagramatic  Arrangement  of  Fault  Tree 


An  event  caused  by  one  or  more  other  events 
which  are  identified 


A  basic  input  event  that  does  not  require 
further  development  as  to  causes 


An  event  which  is  not  developed  further  as 
to  its  causes  because  of  lack  of  information 
or  significance 


An  event  which  is  normal  for  the  system; 
not  a  fault  or  failure  per  se 


AND  gate  -  output  event  occurs  only  if  all 
the  input  events  are  present 


OR  gate  -  output  event  occurs  when  one  or 
more  of  the  input  events  are  present 


INHIBIT  gate  -  output  event  is  caused  by. 
input  event  only  if  specified  condition  is 
satisfied 


Attached  to  logic  gate  to  specify  a  condition 


A 

V 


Continuation  symbol  to  identical  portion 
of  fault  tree 

A  Transfer  In 
^  Transfer  Out 


Continuation  symbol  to  similar  (but  not 
identical)  portion  of  fault  tree 


^  Transfer  In 
.57  Transfer  Out 


Figure  3  SYMBOLS  USED  IN  FAULT  TREE  CONSTRUCTION 
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Circuit  Analogy 


AND  Gate  Logic 


Circuit  Analogy 


OR  Gate  Logic 


Figure  4 


EXAMP1ZS  OF  USE  OF  AND  AND  OR  GATES 
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2.3  QUANTIFICATION 

IITRI  has  a  fault  tree  analysis  computer  program  for  evaluating  the  fault 
tree  diagrams.  The  first  portion  of  the  computer  code  uses  a  matrix  approach 
known  as  the  Boolean  Indicated  Cut  Set  (BIC)  method  to  reduce  the  tree  logic 
to  a  list  of  scenarios  (cut  sets)  that  "lead  to"  the  undesired  top  event  of 
the  tree.  These  cut  sets  are  the  hazard  scenarios  that  must  be  evaluated. 

Each  basic  event  on  the  fault  tree  must  be  provided  a  probability  of 
occurrence  or  a  failure  frequency  (with  associated  downtime)  for  quantification 
of  the  tree.  Four  types  of  data  had  to  be  compiled  to  quantify  the  trees: 

1.  System  Scheduling  Data 

2.  Part  Reliabilities 

3.  Human  Error  Probabilities 

4.  Initiation  Probabilities 

Scheduling  information  was  largely  inferred  from  the  Batelle  Report 
(reference  1).  Part  reliability  data  has  been  compiled  at  IITRI  during  prior 
hazards  and  reliability  analyses  from  numerous  sources.  The  primary  source 
of  reliability  data  used,  however,  was  a  compilation  of  non-electronic  parts 
data  developed  by  the  Reliability  Analysis  Center,  an  ITTRI  organization  in 
Rome,  New  York  (reference  2).  Human  error  data  has  been  compiled  under  a 
recent  project  conducted  by  IITRI  for  the  Chicago  Transit  Authority  (reference  3) 
and  that  was  the  primary  source  for  human  error  probabilities  used.  For 
initiation  probabilities,  the  primary  source  of  data  was  the  Hercules  Hazards 
Analyses  for  WADF  presented  in  the  Batelle  report  (reference  1).  A  variety 
of  explosives  or  propellants  can  be  handled  at  each  plant  area.  Rather  than 
considering  all  possible  materials,  the  most  sensitive  material  for  which 
data  was  available  was  used  to  quantify  each  initiation  stimulus  type.  In 
addition,  there  were  numerous  cases  where  data  was  unavailable  and  technical 
judgements  had  to  be  made.  For  example,  the  probability  that  a  significant 
amount  of  explosive  would  remain  in  a  vessel  during  maintenance  operations 
or  that  a  local  initiation  would  propagate  into  the  bulk  of  material  present 
were  not  easily  quantified.  Therefore,  technical  judgements  had  to  be  used 
to  establish  probability  values  for  the  analysis. 
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The  criteria  for  safety  adequacy  is  stated  in  the  contract  as. 

"The  minimum  acceptable  level  of  risk  for  the  operation  and  main¬ 
tenance  for  the  entire  WADF  complex  and  any  subsystem  is  97.5 
percent  probability  with  a  95  percent  confidence  level  that  a 
category  1  or  2*  accident  will  not  happen  during  25  years  of 
operation  (40  hours  per  week)." 

This  translates  to  specifying  that  the  hazard  incident  probability  per 
year  for  the  entire  facility  is  less  than  or  equal  to  1/1000  with  a  95  percent 
confidence  level.  The  95  percent  confidence  level  criteria  will  be  evaluated 
for  the  facility  as  a  whole  using  the  dominant  cut  sets  derived  for  the 
different  plant  sections  as  the  basis.  Once  the  dominant  cut  sets  for  the 
facility  as  a  whole  have  been  identified  using  average  failure  frequencies 
and  error  probability  values,  Monte  Carlo  simulations  will  be  run  (on  these 
dominant  cut  sets)  to  develop  a  distribution  of  failure  frequencies  for 
the  WADF  as  a  whole.  The  distribution  created  for  the  WADF  will  reflect 
uncertainties  involved  in  predicting  basic  event  frequency  or  probability 
values,  for  example  due  to  variations  in  equipment,  training  of  personnel, 
scheduling,  etc.  The  95  percent  confidence  level  will  then  be  determined  using 
the  derived  distribution.  These  "total  facility"  results  will  be  presented 
in  the  final  report.  For  the  mean  time,  a  probability  criteria  of  1/10,000 
will  be  used  as  a  cutoff  value  instead  of  "1/1,000  with  a  95  percent  confidence 
level"  in  order  to  interpret  the  fault  tree  analysis  results  for  each  plant  area. 


*  Hazard  categories  are  defined  as  follows: 

Category  1  -  Catastrophic.  May  cause  death  or  system  loss.  System  loss 
shall  be  defined  as  damage  which  results  in  the  loss  of  25  percent  or  more 
production  capability  and  requires  30  days  or  more  to  repair. 

Category  2  -  Critical.  May  cause  severe  injury,  severe  occupational  illness 
or  major  system  damage.  Major  system  damage  shall  be  defined  as  that  which 
results  in  more  than  10  percent  loss  of  production  capability  and  requires 
more  than  3  days  to  repair. 

Category  3  -  Marginal.  May  cause  minor  injury,  occupational  illness  or 
minor  system  damage.  Minor  system  damage  shall  be  defined  as  that  which 
results  in  10  percent  or  less  loss  of  production  capability  or  requires 
3  days  or  less  to  repair. 

Category  4  -  Negligible.  Will  not  result  in  injury,  occupational  illness 
or  system  damage. 
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3.  SUMMARY  OF  PRIORITY  1  HAZARDS  ANALYSIS  RESULTS 


The  fault  tree  logic  diagrams  that  have  been  developed  for  the  Priority  1 
systems  are’ voluminous  and  are,  therefore,  presented  under  separate  cover. 
Volume  2  to  this  report.  The  logic  diagram  for  each  plant  area  segments  the 
analysis  into  three  parts  (see  Figure  5): 

1 .  Major  System  Damage  Occurs 

2.  Severe  Injury  or  Death  Occurs 

3.  Severe  Occupational  Illness  Occurs 

The  initial  quantitative  results  obtained  for  the  plant  areas  were  totally 
dominated  by  the  second  two  categories  (Injury  and  Illness),  as  would  be 
expected.  The  "Major  System  Damage"  category  was  really  of  primary  interest, 
because  this  category  includes  the  more  catastrophic  events  such  as  massive 
explosions  of  vessels,  but  these  scenarios  were  dominated  by  the  many  ways  that 
personnel  can  become  injured  or  ill  at  work.  In  addition,  the  injury  and 
illness  hazards  are  in  many  ways  generic  and  can  be  grouped  for  the  total 
facility.  Therefore,  it  was  decided  to  separate  out  the  "Major  System  Damage" 
category  and  quantify  that  portion  of  the  tree  independently  for  each  plant 
area.  The  essence  of  the  results  for  injury  and  illness  throughout  the 
plant  was  obtained  by  quantifying  the  total  Washout/Steamout  Building  South 
Tower  fault  tree.  The  injury  and  illness  results  are  summarized  in  the  para¬ 
graphs  below. 
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3.1  INJURIES  AND  OCCUPATIONAL  ILLNESS 

In  the  South  Tower  analysis,  illness  and  injuries  were  estimated  to 
occur  with  frequencies  of  5.34  and  0.21  incidents  per  year,  respectively. 

The  estimated  frequencies  were  based  on  conservative  component  probability 
values  in  all  cases.  Therefore,  the  compiled  values  should  be  considerably 
higher  than  will  actually  occur  during  operation  of  the  facility.  To  quantify 
the  probability  of  illness  occurring  given  that  an  operator  is  exposed  to  a 
chemical,  the  toxic  rating  code  presented  in  Reference  4  was  used.  The  rating 
scheme  in  Reference  4  consists  of  the  following  format: 


Exposure 

Acute  -  single  exposure  of  short  duration  (seconds,  minutes, 

hours) 

Chronic  -  prolonged  or  repeated  exposure  covering  long 

duration  (days,  months,  years) 

Effect 

Local  -  action  takes  place  at  point  or  area  of  contact 

(e.g.  skin,  mucous  membranes  of  eyes,  nose,  etc.) 

Systemic  -  site  of  action  other  than  point  of  contact 

Toxic  Ratings 


U  =  Unknown 

0  =  No  toxi ci ty 

1  =  Slight  toxicity  -  produces  only  slight  effects 

2  =  Moderate  -  not  of  such  severity  as  to  threaten  life  or 

produce  permanent  physical  impairment 

3  =  Severe  -  severity  to  threaten  life  or  cause  permanent 

physical  impairment  or  disfigurement 

Thus,  if  the  acute  toxic  rating  was  given  as  3  for  a  material,  the  probability 
of  "illness"  occurring  was  assigned  to  be  1.0  for  short  duration  exposures  in 
the  plant.  If  the  chronic  rating  was  given  as  3,  the  probability  of  illness 
from  a  prolonged  or  repeated  exposure  in  the  plant  was  assigned  a  value  of  1.0. 
Similarly,  the  probability  of  illness  was  assigned  a  value  of  0.6  for  toxic 
ratings  of  2  and  0.3  for  toxic  ratings  of  1  in  order  to  discriminate  between 
the  cases. 

It  should  be  noted  that  the  South  Tower  has  a  special  toxicity  problem 
in  that  explosive  D  will  be  handled.  Explosive  D  is  an  extremely  toxic  material 
with  ratings  given  in  Reference  4  as  follows: 
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Acute  Local:  Irritant  2;  Allergen  2:  Ingestion  3;  Inhalation  3, 

Acute  Systemic:  Ingestion  3;  Inhalation  3. 

Chronic  Local:  Allergen  2. 

Chronic  Systemic:  Ingestion  3;  Inhalation  3;  Skin  Absorption  3. 

The  potential  injury  and  illness  hazards  identified  from  the  fault  tree 
analysis  of  the  South  Tower  are  summarized  below: 

ILLNESS  FREQUENCIES  Frequency 

Scenari o  Descri pti on  (per  year) 

Contaminant  Ingested 

•  due  to  hand  contact  3.24 

•  due  to  liquid  splatter  1.50 

t  due  to  contaminant  getting  into  food  0.015 

Explosive  Fumes  Inhaled 

•  due  to  Rotoclone  belt  slipping  0.014 

t  due  to  air  handling  duct  dampers  out  of  0.55 

adjustment 

•  due  to  imbalance  in  air  handling  ducts  from  0.011 

contaminant  buildup  on  duct  walls 

t  due  to  plugged  eliminator  plates  in  Rotoclone  0.0043 

•  due  to  plugged  drain  line  in  Rotoclone  0.0039 

•  due  to  plugged  equalizing  hose  in  Rotoclone  0.0039 

INJURY  FREQUENCIES  Frequency 

Scenario  Description  (per  year) 

— - -  v  ^ 

Fall  on  slippery  floor  during  maintenance  0.0104 

Fall  on  slippery  floor  -  wet  contaminant  -  during  0.0052 

ope ration 

Impact  due  to  mechanical  assist  control  failure  0.0051 

Impact  due  to  washout  turntable  failure  0.0147 

Impact  due  to  mechanical  assist  part  failure  0.0630 

Lifting  injury  by  lifting  without  mechanical  assist  0.0255 

Other  injuries  0.0853^ 

.'i0  V* 

3.2  WASHOUT/STEAMOUT  NORTH  TOWER  AND  REFINING  BUILDING 

The  North  Tower  of  the  Washout/Steamout  Building  and  the  Refining  Building 
have  many  similarities.  In  the  North  Tower,  explosive  is  steamed  out  of 
munitions  items  clamped  to  tilt  tables  using  a  steam  lance.  The  explosive  then 
drains  into  a  separator  vessel  (a  holding  tank)  and  then  is  metered  into  melt 

NT  RESEARCH  INSTITUTE 


15 


kettles.  In  the  melt  kettles  a  vacuum  is  applied  to  the  liquid  for  a 
prescribed  period  of  time  to  remove  moisture.  The  liquid  explosive  is  then 
passed  to  a  belt  flaker,  and  finally  the  product  is  boxed  and  weighed.  The 
asphalt  liner  and  remaining  explosive  in  the  metal  casing  are  steamed  out  in 
an  autoclave.  The  autoclave  products  drain  into  a  kernel! ing  machine  where 
they  are  solidified  into  small  pieces  by  mixing  with  cold  water.  The  product 
from  the  kernel  ling  machine  is  transported  to  the  Bulk  Explosive  Disposal 
Building  for  incineration. 

In  the  Refining  Building,  the  munitions  items  are  placed  in  an  autoclave 
in  a  fixture  such  that  steam  contacts  only  the  outer  surface  of  the  items. 
Explosive  then  melts  out  and  drains  into  melt  kettles.  No  separate  autoclaves 
or  a  kernel  ling  machine  are  used  to  remove  an  asphalt  liner,  but  the  remainder 
of  the  system  is  almost  identical  to  that  in  the  North  Tower. 

Runaway  Reaction 

In  both  buildings,  by  far  the  most  dominant  category  of  scenarios  involved 
runaway  reactions  in  liquid  explosive  holding  vessels  -  primarily  in  the  melt 
kettles  and  separator  vessel,  but  also  in  the  North  Tower  autoclave  if  strati¬ 
fication  of  explosive  and  asphalt  occurs  in  the  bottom  of  the  vessel. 

A  thermal  runaway  is  a  decomposition  reaction  in  which  the  chemical 
involved  (e.g.  a  melted  explosive)  generates  heat  more  rapidly  than  it  can 
be  dissipated.  This  heat  buildup  results  in  a  temperature  rise  in  the  area  of 
decomposition.  The  temperature  rise  increases  the  decomposition  rate,  which 
generates  more  heat,  which  raises  the  temperature  even  faster,  and  so  on.  In 
this  fashion,  the  temperature  rise  becomes  extremely  steep.  The  associated 
pressure  also  rises  quickly  and  an  explosion  results. 

The  boundary  (e.g.  vessel  wall)  temperature  at  which  the  heat  generated 
by  the  decomposition  just  equals  the  heat  transfer  rate,  is  known  as  the  cri¬ 
tical  temperature.  The  critical  temperature  depends  not  only  on  the  type  of 
explosive  present,  but  also  on  the  geometry  of  the  holding  vessel,  as  the 
geometry  affects  the  rate  at  which  heat  can  be  conducted  away.  Runaway  re¬ 
actions  are  possible  only  when  the  temperature  of  the  explosive  is  above  the 
critical  temperature. 

Pure  explosives  typically  require  temperatures  well  above  their  melting 
points  and/or  very  long  times  for  a  thermal  runaway  to  develop.  Therefore,  in 
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order  to  have  such  an  event  in  a  facility  such  as  WADF,  the  pure  explosive  must 
be  modified  in  some  way.  Available  experimental  data  show  that  some  contaminants 
and  aging  (melt-remelt  cycles)  can  substantially  decrease  the  critical  tempera¬ 
ture  and  time  to  explosion.  Many  types  of  contaminants  will  appear  locally 
within  a  chemical  mixture,  rather  than  homogeneously  distributed  throughout 
the  mixture.  Therefore,  runaway  reaction  will  develop  locally  in  these  cases 
based  on  the  geometry  of  the  contaminated  zone  (not  the  vessel  geometry).  In 
these  cases,  the  runaway  will  be  difficult  to  sense;  one  thermocouple  is  not 
likely  to  be  at  the  correct  location. 


Agitation  will  serve  to  dilute  these  local  contamination  effects  and 
improve  heat  transfer  to  the  boundary  of  the  vessel  by  convection.  Agitation 
was  not  considered  in  the  runaway  reaction  analyses  that  were  conducted,  al¬ 
though  a  series  of  trial  calculations  were  conducted  to  determine  if  heat 
transfer  would  be  enhanced  significantly.  It  was  concluded  that  the  agitation 
effects  on  heat  transfer  is  not  dominant,  particularly  when  considering  the 
separator  at  1  RPM  and  the  autoclaves  which  have  no  agitation.  Agitation 
effects  on  local  contamination  is  considered  to  be  more  significant.  In  order 
to  better  understand  the  significance  of  agitation  on  the  development  of  thermal 
runaways,  it  is  recommended  that  simulation  tests  be  conducted  and  more  compre¬ 
hensive  prediction  techniques  be  developed,  including  local  contamination  and 
agitation  effects. 


The  fault  tree  analysis  disclosed  that  several  runaway  reaction  events 
could  occur  each  year.  Due  to  the  lack  of  experimental  data  available  to 
quantify  this  hazard,  the  analysis  was  conservative.  IITRI  strongly  recommends 
that  a  comprehensive  experimental  program  be  accomplished  in  order  to  develop 
a  better  understanding  of  the  effects  of  aging  and  contaminants  and  to  obtain 
sufficient  data  to  realistically  quantify  the  potential  for  runaway  reactions 
at  WADF.  The  limited  data  available  characterizing  the  behavior  of  contami¬ 
nated  and  aged  explosives  show  a  significant  increase  in  the  susceptibility  for 
thermal  explosion.  The  rationale  behind  evaluating  the  runaway  reaction 
hazard  is  presented  in  Appendix  C, 


The  fault  tree  analysis  indicates  that  prolonged  holds  due  to  system 
problems  downstream  of  the  hold  vessel  will  be  the  major  cause  of  thermal 
explosion  in  the  melt  kettles,  separator,  and  North  Tower  Autoclaves.  In  the 
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analysis  prolonged  holds  were  considered  to  occur  within  a  single  shift  the 
majority  of  the  time,  with  two  hours  beyond  the  normal  operating  time  being 
most  typical. 

The  next  highest  probability  runaway  reaction  scenarios  involved  prolonged 
holds  with  explosive  in  the  long  drain  line  sections  at  the  bottom  of  the  melt 
kettles  and  separator.  In  these  pipe  sections  there  will  be  no  agitation  avail¬ 
able  even  under  normal  conditions,  so  the  thermal  explosion  model  is  more 
realistic  in  this  case.  Calculations  were  still  conservative  in  that  the 
drains  are  not  steam  jacketed  and  will  actually  experience  a  somewhat  lower 
temperature  than  was  assumed„  However,  this  lack  of  steam  jacketing  increases 
the  probability  that  a  certain  amount  of  explosive  will  experience  melt-remelt 
cycling,  in  which  the  same  explosive  is  melted  and  rehardens  several  times. 

Tests  have  shown  that  samples  of  explosive  subjected  to  such  cycling  are  more 
susceptable  to  thermal  runaway  than  samples  which  are  not  cycled. 

The  effect  of  a  contaminant  entering  a  hold  vessel  was  found  to  be  some¬ 
what  lower  probability  merely  because  it  is  less  likely  that  a  "bad"  contami¬ 
nant  will  enter  the  system  than  that  a  prolonged  hold  will  occur.  If  an  in¬ 
compatible  material  enters  the  system,  the  susceptibility  of  the  liquid  explo¬ 
sive  to  runaway  reaction  could  be  greatly  enhanced,  as  discussed  in  Appendix  C. 

Since  not  enough  is  known  about  the  susceptibility  of  the  WADF  explosives 
to  runaway  reaction,  all  precautions  must  be  taken  to  assure  that  a  runaway 
reaction  can  be  prevented  or  terminated  early  enough „  Unfortunately,  the 
options  that  are  now  available  may  not  be  adequate  or  may  be  extremely  expen¬ 
sive. 

In  the  opinion  of  IITRI  personnel,  the  best  approach  would  have  been  to 
protect  the  vessels  in  the  same  manner  that  reactor  vessels  are  protected  in 
explosive  manufacturing  facilities.  Reactor  vessels  (for  example  in  TNT 
plants)  generally  have  a  large  diameter  drain  pipe  in  the  bottom,  opening  into 
a  water  filled  trough  or  tank.  This  would  allow  the  tank  to  be  emptied  quickly.  In 
addition,  the  liquid  would  be  cooled  and  spread  into  a  thin  layer.  Although 
liquid  explosive  holding  vessels  are  not  generally  thought  to  embody  the  same 
level  of  hazard  as  reactor  vessels,  the  WADF  explosives  are  not  pure  and  could 
be  much  more  susceptible  to  runaway  reaction  than  materials  normally  encoun- 
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tered  in  melt  kettles.  Modification  of  the  vessels  at  WADF  to  be  able  to 
quickly  dump  the  contents  would  require  major  redesign  and  equipment  alterations. 

The  existing  protective  system  used  in  the  liquid  explosive  holding 
vessels  is  a  gentle  top  surface  deluge.  Such  a  system  should  be  effective  in 
preventing  propagation  of  a  reaction  from  another  vessel,  e.g.  through  the 
ventilation  duct  work;  however,  this  deluge  is  not  effective  in  preventing  thermal 
explosion  in  the  vessel  itself.  Runaway  reactions  will  generally  begin  locally, 
beneath  the  surface  of  the  liquid.  A  gentle  top  surface  deluge  will  create  a 
crust  of  solid  explosive  and  protect  the  reaction  below  the  surface,  allowing  it 
to  continue. 


In  addition  to  the  deluge  system,  the  vessels  are  protected  by  a  drain 
line  that  can  "dump"  the  contents  to  casting  pans.  This  drain  is  only  3  in. 
(7o62  cm)  diameter  and  is  not  expected  to  respond  quickly  enough  in  the  event 
of  a  runaway  in  most  cases.  A  much  larger  diameter  line  would  be  required  in 
order  to  dump  quickly  enough. 


of  a 


Some  of  the  concepts  that  should  be  considered  to  reduce  the  possibility 
runaway  reaction  include  the  following:  ^ 


A- 


Shorten  the  dead  space  in  the  drain  lines  at  the  bottom  of  the 
hold  vessels.  This  is  a  relatively  simple  fix  for  a  problem  that 
appears  to  be  very  credible. 


fyt''’ 


•  Sense  for  temperature  excursions  using  thermocouples  at  several 
locations  inside  the  vessel.  More  locations  monitored  will 
increase  the  chance  of  detecting  the  onset  of  the  reaction. 


When  a  runaway  is  sensed,  dump  the  contents  to  casting  pans  using 
the  existing  system.  The  dump  will  be  too  slow  in  some  cases  but 
may  be  sufficient  in  others.  Personnel  should  clearly  understand 
that  the  dump  cannot  be  counted  on  and  should  know  to  take  other 
precautions  (e.g.  clear  the  area). 


In  spite  of  the  apparent  gas  generation  problem,  high  speed  high 
volume  nozzles  oriented  below  the  liquid  surface  to  _produce  swirl 
should  be  considered  further.  If, it  is  foujjd-^xr'tJe  effective,  this 
solution  could  be  adapted  to  the  exis£yrg  equipment  with  relative 
ease.  _ _ 7  HfMJ  & 

Finally,  better  agitation  will  help  dissTpIl 
Perhaps  enhanced  agitation  could  be  initiated ^hen  local  higji_ . 
temperature  is  sensed.  This,  may  be  enough  to  HTssipaf?~th^_reaction 
or  to  slow  it  down.  This  concept  should  be  evaluated  further. 


The  concepts  mentioned  above  (and  any  other  concepts  thought  of)  should 
be  studied  carefully  to  determine  their  feasibility  and  practicality. 
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The  remaining  dominant  problem  areas  identified  in  the  hazards  analysis 
of  the  North  Tower  are  discussed  in  Appendix  D.  The  fault  tree  for  the  Refining 
Building  identified  a  parallel  set  of  dominant  potential  hazards,  and  the  evalu¬ 
ation  of  these  hazards  was  nearly  identical  to  that  for  the  North  Tower.  These 
potential  hazards  are  summarized  below:  ,^4  . 

f  L^  v  K 

Lance  Impact  Initiation  from  Rough  Handling  During  Steamout  (^j  V 


4* 


It  was  estimated  that  a  lance  operator  could  initiate  explosive 


inside  an  item  by  impact  (rough  handling)  at  a  probability  (expected  frequency) 
of  about  5  X  10_3/year.  That  is,  initiation  would  occur  by  the  operator  force¬ 
fully  pushing  or  swinging  the  metal  tipped  lance  into  protrusions  inside  an 
item,  impacting  liquid  explosive  coating  the  metal  surfaces.  This  scenario 
could  be  avoided  by  using  plastic  tipped  lances.  The  plastic  introduces  a 
possible  electrostatics  (ESD)  hazard.  This  proposed  modification  should  be 
evaluated  further  to  assure  that  the  ESD  hazard  imposed  by  a  plastic  tipped 
lance  would  indeed  be  negligible. 


IITRI  has  developed  a  method  for  predicting  the  spark  energies  associated 
with  dielectric  surfaces  including  the  flow  of  charges  along  the  surface  to¬ 
ward  the  discharge  region,  however,  no  experimental  data  exists  for  verifying 
this  method  or  determining  input  parameter  values.  It  is,  therefore,  recom¬ 
mended  that  experiments  be  conducted  to  measure  spark  energies  for  scenarios 
of  this  type. 


Impeller  Impacts/Friction  Within  Melt  Kettle  or  Separator  Vessel 


If  the  impeller  becomes  misaligned  during  major  maintenance  or  due  to 
part  failure,  or  if  a  foreign  piece  of  metal  enters  the  vessel,  metal-metal 
friction  and/or  impact  initiation  could  be  possible  within  a  melt  kettle  or 
the  separator  vessel.  It  was  estimated  that  such  an  event  could  occur  with 
a  frequency  of  2„22  X  10_3/year.  To  better  evaluate  this  potential  hazard, 
it  is  suggested  that  tests  be  conducted  simulating  the  frictional  and  impact 
simuli  that  would  be  experienced  inside  a  melt  kettle  and  separator  vessel, 
if  the  impeller  becomes  misaligned  or  if  a  foreign  piece  of  metal  enters  the 
system.  Clearly,  any  major  maintenance  should  include  checks  to  assure  that 
the  impeller  remains  aligned  after  the  vessel  has  been  reassembled.  Frequent 
inspections  of  the  screen  leading  into  the  separator  in  the  North  Tower  should 

be  accomplished  to  assure  its  integrity. 
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Tool  Dropped  Into  Melt  Kettle  or  Separator  During  Major  Maintenance 

It  was  estimated  that  an  operator  will  initiate  a  fire  or  explosion  by 
dropping  a  tool  into  a  melt  kettle  or  separator  during  major  maintenance  with 
a  frequency  of  2.17  X  10“4  to  2.17  X  10"3/year.  This  hazard  can  be  minimized 
by  attaching  tools  to  the  operator  with  a  short  cord  so  that  the  tool's  fall 
is  broken  in  most  cases.  In  addition,  strict  management  controls  should  be 
incorporated  whenever  major  maintenance  is  to  be  accomplished.  This  would  in¬ 
clude  use  of  area  entry  and  hot  work  permit  programs,  and  tool  inventory  controls. 

Rotoclone  Fire 

Fires  in  the  dust  collection  system  were  estimated  to  occur  with  a  fre¬ 
quency  of  2.17  X  10"3/year.  The  major  problem  area  is  initiation  of  explosive 
dust  deposited  on  the  walls  of  ducts  leading  to  the  scrubber.  Initiation 
could  occur  during  cleanup/maintenance  due  to  an  operator  dropping  a  tool  or 
due  to  ESD  from  a  person.  Strict  management  controls  (as  discussed  above) 
will  serve  to  minimize  the  possibility  of  initiation  in  these  cases.  Initiation 
due  to  mechanical  failure  downstream  of  the  scrubber  (e.g.  due  to  an  overheated 
bearing)  is  expected  to  occur  much  less  frequently  because  explosive  dust  will 
only  collect  on  walls  downstream  of  the  scrubber  if  the  scrubber  operates  in¬ 
efficiently  for  a  long  time  without  cleanup. 

Rough  Handling  of  Separator  Dipstick 

It  is  quite  likely  that  explosive  will  collect  on  the  dipstick  holder. 

Impacts  of  the  dipstick  onto  its  holder  could  occur  by  numerous  scenarios. 

For  example,  if  the  operator  misses  the  hole  while  hurriedly  trying  to  insert 
the  dipstick,  a  localized  impact  will  result.  If  the  explosive  severely  con¬ 
taminates  the  holder  it  is  possible  that  the  dipstick  could  freeze  in  place 
and  the  operator  try  to  knock  it  loose.  It  was  estimated  that  initiation  of 
explosive  inside  the  separator  vessel  would  occur  at  a  rate  of  1.82  X  10_3/year 
by  this  means. 

It  should  be  noted  that  perhaps  a  worse  problem  with  the  dipstick  is  the 
potential  for  introducing  contaminants  into  the  system,  increasing  the  poten¬ 
tial  for  runaway  reaction. 
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Item  Impact  Scenarios 

Several  scenarios  were  identified  resulting  in  the  explosion  of  a  full 
munitions  item  due  to  impact„  These  include  impacts  during  jib  crane,  building 
crane,  and  forklift  manuevers  (i.e.  item  moved  into  an  obstacle  or  dropped). 

The  probability  of  such  an  event  was  estimated  to  be  8.51  X  10-4/year.  The 
probability  of  initiation  was  based  on  incidents  that  occurred  during  the 
Vietnam  war,  therefore,  this  hazard  is  considered  to  be  credible. 

Person  ESP 

There  are  a  number  of  locations  within  the  WADF  facility  where  explosive 
or  propellant  may  be  exposed  and  could  be  ignited  by  an  electrostatic  discharge 
(ESD)  from  a  person,  if  the  spark  has  sufficient  energy.  One  such  scenario 
has  already  been  mentioned  in  the  discussion  of  the  Rotoclone  duct  work.  It 
was  estimated  that  initiation  by  ESD  from  a  person  could  occur  with  a  frequency 
of  8.12  X  10"4/year  for  any  given  plant  area  where  explosive  is  exposed.  For 
the  facility  as  a  whole,  this  frequency  will  be  about  an  order  of  magnitude 
higher. 

Impingement  of  Viscous  Explosive  Onto  Grate  to  Separator  After  Line  Unblocks 

This  sceanrio  is  concerned  with  the  sections  of  flexible  hose  between  the 
•tilt  tables  and  the  network  of  fixed  pipes  draining  into  the  separator.  These 
flexible  hoses  may  have  to  be  replaced  periodically,  either  due  to  wear  or  in 
order  to  obtain  the  proper  fit  for  a  specific  table  tilt  angle  to  be  used.  If 

the  hose  is  too  long,  a  dip  in  the  line  could  result.  Explosive  will  tend  to 

stagnate  at  the  low  point,  solidify  near  the  wall  and  eventually  block  the 
flow,  particularly  with  the  more  viscous  materials  such  as  H6  and  HBX.  If  the 
solidified  material  suddenly  breaks  loose,  it  will  eventually  impact  a  wall  of 
the  pipe  or  the  grate  above  the  separator  vessel.  Liquid  explosive  wetting  the 

surfaces  of  the  solid  piece  or  grate,  could  become  ignited  by  the  impact.  It 

was  estimated  that  this  event  has  a  probability  of  7.66  X  10"4/year.  The 
credibility  of  this  scenario  and  initiation  mechanism  should  be  evaluated 
further. 
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Impact  of  Separator  or  Melt  Kettle  Cover  Onto  Vessel  Lip  During  Major  Maintenance 


It  was  estimated  that  an  initiation  by  a  vessel's  cover  knocking  into  the 
lip  during  removal  of  the  cover  could  occur  at  a  rate  of  2.17  X  10"5/year  for 
any  given  melt  kettle  or  separator.  In  this  scenario,  a  significant  quantity 
of  explosive  must  be  present  inside  the  vessel  at  the  time  of  the  impact.  Strict 
management  controls,  i.e.  use  of  an  area  entry  and  hot  work  permit  system, 
should  effectively  minimize  the  possibility  that  major  maintenance  would  be 
accomplished  without  first  thoroughly  cleaning  out  the  vessel. 

Explosion  Due  to  Foamup  in  Melt  Kettle  During  Vacuum  Treatment 

Liquid  Explosives  have  a  tendency  to  foam,  particularly  when  subjected  to 
low  pressure  and  agitation.  If  the  foam  reaches  the  port  for  the  vacuum  line 
in  the  cover  of  a  melt  kettle,  it  is  conceivable  that  liquid  explosive  could 
get  into  the  vacuum  pump.  The  vacuum  pump  should  not  produce  initiation 
sources  as  long  as  seal  water  is  present.  However,  if  the  seal  water  is  lost 
and  the  water  pressure  interlock  fails,  initiation  may  be  possible  "within  the 
pump.  It  was  estimated  that  this  event  could  occur  at  a  rate  of  8.8  X  10“7/year. 
Vacuum  traps  in  the  lines  from  the  melt  kettles  to  the  vacuum  pump  should  be 
considered  to  prevent  explosive  from  getting  into  the  pump.  The  vacuum  traps 
should  be  equipped  with  level  switches  to  stop  the  vacuum  pump  and  sound  an  alarm 
in  the  event  that  the  level  reaches  a  preset  height. 

ESP  Scenarios 

Several  other  electrostatic  discharge  scenarios  showed  up  in  the  fault  tree 
analysis  as  potential  hazards.  These  are  presented  in  Appendix  D.  However, 
after  further  analysis  it  was  determined  that  the  energy  produced  by  these 
situations  would  be  small,  yielding  very  low  probability  of  initiation. 


3.3  WASHOUT/STEAMOUT  BUILDING  SOUTH  TOWER 

Results  of  the  fault  tree  analysis  of  the  South  Tower  Hydraulic  Cleaning 
Operation  indicate  a  category  I  or  II  accident  frequency  of  0.357  per  year, 
excluding  injuries  and  illnesses  of  various  causes.  This  result  can  be 
further  broken  down  as  follows: 

t  explosions  (due  to  item  impact  or  runaway  reaction)  -  0.00082  per  year 

•  equipment  damage  incidents  (mainly  due  to  impacts)  -  0.332  per  year 

•  prolonged  shutdown  incidents  due  to  yellow  D  plateout  or  other  y  % 

contamination  problem  -0.024  per  year 

More  detail  on  each  of  these  categories  is  given  below.  It  must  be  pointed 
out  that  fault  tree  input  probabilities/frequencies  for  South  Tower  events  are 
based  on  the  assumption  that  an  equal  number  of  each  item  type  must  be  processed 
in  the  long  term.  This,  of  course,  results  in  much  higher  item  production  rates 
at  the  washout  turntable  operations  than  at  the  washout  chamber,  which  is  a 
realistic  assumption.  Also,  it  is  assumed  that  yellow  D  process  production  is 
directly  proportional  to  the  number  of  item  types  containing  yellow  D.  This 
results  in  yellow  D  operations  occurring  approximately  12/20  of  the  time  with 
A-3  production  during  the  remaining  8/20  of  the  time. 

The  most  serious  incidents  considered  are  those  involving  explosion  because 
of  the  higher  potential  of  human  and  property  losses.  The  fault  tree  analysis 
has  shown  that  the  most  probable  scenarios  involving  explosions  are  those  resulting 
from  impact  of  items  during  transfer  operations.  The  most  significant  of  these 
are  described  below. 

Item  Impact  Initiation  During  Mechanical  Assist  Operations 

Due  to  the  high  rate  of  mechanical  assist  device  usage,  the  potential  for 
mishandling  incidents  is  greatest  here.  The  table  below  gives  one  example  of 
a  scenario  leading  to  an  item  impact  initiation,  involving  operation  failure 
(7  x  10-Vyear).  Other  similar  but  less  likely  scenarios  involve  mechanical 
assist  brake  failure  and  control  system  failure  (1.92  x  10"5  and  5.61  x  10-5/year 
respectively). 
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Component* 

Description 

Probability/freq. 

25 

Projectile  lifted  with  mechanical  assist 

61.2  items/hr 

32 

Operator  releases  item  at  inappropriate 
time 

0.0005 

26 

Given  mechanical  assist  failure,  item 
impact  results 

0.5 

28 

Item  impact  causes  explosive  initiation 

1.10  x  10"5 

Component*28  is  the  critical  initiating  event.  Its  probability  is  based  on 
mishandling/impact  incidents  of  bombs  during  the  Vietnam  conflict  in  the  period 
1968  -  1972.  For  3  recorded  explosion  incidents,  there  were  about  2.7  x  10+5 
mishandling  incidents,  derived  from: 

(  9,066,573  bombs  produced  J  (10  handlings/)  (3  x  1  O'3  mi shandl ings/j  =  2.7  x  10+5 
\  during  this  period/  \  bomb  /  \  handling  /  mi shandl ings 

This  corresponds  to  1.1  x  10-5  explosions/mishandl ing. 

Item  Impact  During  Washout  Chamber  Operations 

Another  somewhat  similar  scenario  in  the  washout  chamber  is  given  in  the 
following  table  (1.13  x  10'5/year), 


Component 

Description 

Probability/freq 

49 

Item  placed  in  washout  chamber 

0.99  items/ hr 

53 

Operator  control /mi shandl ing  failure 

0.0005 

50 

Given  washout  chamber/operator  failure 
item  impact  results 

0.5 

52 

Given  item  impact,  explosion  occurs 

1.1  x  10"5 

This  scenario  assumes  the  same  probability  of  initiation  due  to  impact  as 
discussed  above. 

Equipment  Damage  Incidents 

The  potential  for  process  shutdown  due  to  equipment  damage  was  shown  to 
be  much  higher  than  that  of  explosion  (about  0.332/year).  This  is  due  to  wide 
variation  of  scenarios  involving  projectile  mishandlings,  equipment  failures, 
etc.  The  scenario  having  the  highest  frequency  of  occurrence  (1.03  x  10_1/year), 
is  equipment  damage  during  washout  chamber  operations  due  to  mishandling  or 

Component  numbers  are  those  that  appear  on  the  fault  tree  diagrams  in 
Volume  2  to  this  report. 
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equipment  failure.  This  is  primarily  because  of  the  high  weight  of  projectiles 
processed  in  this  area  (260-2700  lbs).  This  problem  area  and  the  potential 
for  initiation  by  item  impacts  indicate  that  operators  using  mechanical  assist 
devices  must  be  well  trained,  should  be  certified,  and  operation  procedures  must 
be  strictly  enforced., 

Other  Potential  Hazards  in  the  South  Tower 

Other  incidents  having  a  significant  frequency  of  occurrence,  resulting  in 
a  prolonged  process  shutdown  include: 

•  loss  of  agitation  in  collection  tank  causes  yellow  D  stratification, 
buildup  or  plateout  (1.46  X  10_2/year) 

•  various  scenarios,  involving  the  steam  pressure  dropping  during  the 
yellow  D  process,  result  in  plateout  (3.75  X  10“3/year). 

•  yellow  D  process  water  heater  thermostat  fails,  causing  plateout 
problems  (1.36  X  10~5/year) 
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3.4  BULK  EXPLOSIVES  DISPOSAL  BUILDING 

Based  on  the  results  of  the  fault  tree  analysis,  no  scenarios  were  above 
1  x  10"4  incidents  per  year;  however,  four  problem  areas  emerged  warranting 
further  consideration: 

1)  Compatibility  problems  between  explosives  being  processed 

2)  Flashback  from  an  incinerator  via  explosive  settled  in  the  feed  line 

3)  Impingement  of  large  pieces  of  explosive  within  the  grinder 

4)  Failure  of  grippers  allowing  a  drum  to  drop  during  forklift 
manuevers  or  at  the  drum  dumper 

After  subsequent  evaluation,  only  the  failure  of  drum  grippers  is  considered  to 
be  a  credible  problem  of  significance. 

Material  Compatibility 

In  the  bulk  incinerator  it  would  be  operationally  desirable  to  indis¬ 
criminately  process  whatever  explosive  materials  require  disposal  at  the  time. 
However,  mixing  materials  which  are  incompatible  could  induce  a  runa¬ 
way  reaction  or  produce  sensitive  compounds.  With  regard  to  the  potential  for 
runaway  reaction  within  the  bulk  incinerator  system,  the  materials  present  are 
at  low  temperatures  and  mixed  with  large  quantities  of  water  within  the  tanks 
and  lines.  Even  if  settling  occurs,  the  temperatures  should  be  well  below 
critical  values  and  runaway  reaction  is  not  expected  to  be  a  problem. 

A  survey  of  available  compatibility  data  (see  Appendix  B)  indicated  that 
explosives  are  generally  compatible  with  other  explosives.  This  was  to  be 
expected  since  many  explosive  compositions  have  the  same  basic  constituents. 
Only  a  few  incompatibilities  of  this  type  were  uncovered. 

Explosive  D  with  NC  or^NC  and  NG^at  100°C 
Explosive  D  with  Haleite  or  Tetryl  at  120°C 
PBX  9407  with  PETN 
PBX  9404  with  Nitroquanidine 

Comp  B  and  TNT  with  asphalt  compounds  (more  a  decomposition 
and  quality  control  problem) 

In  addition,  explosive  D  forms  sensitive  primary  explosive  compositions  with 
metals.  It  should  be  noted  that,  the  available  compatibility  data  is  always 
for  pure  chemicals.  The  WADF  explosives  are  old;  they  may  have  experienced 
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some  decomposition  and  may  contain  contaminants  that  are  not  easily  defined. 
Therefore,  existing  compatibility  data  may  not  be  pertinent  in  many  cases. 

Keeping  these  precautions  in  mind,  it  is  suggested  that  a  compatibility  library 
be  set  up  at  WADF„  Whenever  a  new  material  is  to  be  disposed  of  in  the  bulk 
incinerator  (or  handled  anywhere  at  the  site)  the  existing  data  should  be 
searched  for  potential  problems.  If  the  existing  data  base  is  insufficient 
to  evaluate  the  new  material,  a  battery  of  compatibility  tests  should  be  run 
on  the  material  before  the  material  is  handled  at  the  site. 

Flashback  from  Incinerator 

If  explosives  were  allowed  to  settle  out  of  the  slurry  suspension  in  the 
feed  tank  or  feed  line,  a  slug  of  material  strongly  concentrated  with  explosive, 
could  be  pumped  directly  into  the  incinerator.  This  could  result  in  an  explo¬ 
sion  at  the  incinerator  and  possible  flashback  of  the  reaction  for  some  distance 
in  the  feedlines. 

Although  this  scenario  is  conceptually  credible,  the  system  design  incor¬ 
porates  features  which  protect  against  the  occurrence  of  such  an  event.  First, 
the  lines  are  automatically  flushed  with  water  at  any  shutdown.  This  would 
clear  the  lines  of  any  explosive  that  could  settle.  Second,  the  feed  tank  is 
agitated  for  a  period  prior  to  pumping  with  the  delay  time  automatically  con¬ 
trolled.  Third,  the  mixture  within  the  feedline  is  circulated  for  a  period 
(automatically  controlled)  before  the  pump  to  the  incinerator  can  be  started. 

At  least  two  automatic  controls  would  have  to  fail  in  order  for  a  slug  of 
concentrated  slurry  to  be  fed  directly  into  an  incinerator. 

Impingement  at  Grinder 

The  grinder  speed  is  1200  rpm.  Thus,  at  the  periphery  of  the  0.5m  dia¬ 
meter  grinder  cylinder  the  tangential  velocity  will  be  31.4  m/s.  As  pieces 
of  explosive  enter  the  grinder,  they  will  impact  at  about  that  relative  speed. 

Impingement  data  can  be  used  to  evaluate  the  potential  for  initiation. 

The  lowest  impingement  velocity  in  the  compiled  sensitivity  data  at  IITRI  was 
for  RDX  (from  reference  1)  with  a  TIL*  of  91.2  m/s  for  crude  RDX  from  age  tanks- 


*threshold  initiation  l_evel 
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25  percent  wet  with  the  target  plate  at  a  90°  angle.  This  indicates  that  initi¬ 
ation  would  not  occur.  However,  for  large  pieces  of  explosive  dropped  into  the 
grinder,  impingement  data  is  probably  not  appropriate. 


For  large  pieces  of  explosive,  the  surface  layer  will  experience  an  impact 
stimulus  of 

e  =1  *  V2 
e  2  A  v 

where  M  is  the  mass  of  the  piece,  V  is  the  relative  velocity  and  A  is  the  impact 
area.  For  HBX-1  the  impact  is  about  1.6  x  104  jjp.  This  indicates  that  the 
ratio  (^-)  must  be  greater  than  or  equal  to  32.5  Kg/nffor  initiation  to  occur. 

If  the  explosive  piece  has  a  density  of  about  1.6  gm/cc,  the  following  critical 


conditions  for  initiation  are 

Mass  of  Piece 

indicated: 

Equivalent 
Diameter  of  Piece 

Critical 

Diameter  of  Impact  Area 

(gm) 

(cm) 

(cm) 

9.4  x  10'4 

0.1 

0.018 

0.105 

0.5 

0.2 

0.84 

1.0 

0.57 

838 

10.0 

18.1 

This  table  shows  that  the  critical  diameter  required  to  achieve  the  TIL 
value  for  impact  initiation  is  large  compared  to  the  piece  diameter,  particularly 
for  the  large  pieces  of  explosive.  Therefore,  it  will  be  nearly  certain  that 
the  TIL  value  will  be  exceeded  for  large  pieces.  If  the  same  set  of  calculations 
is  done  for  the  50  percent  probability  of  initiation  level,  essentially  the 
same  result  is  obtained.  This  indicates  that  initiaion  would  be  very  likely 
if  no  water  were  used  during  grinding.  With  water,  initiation  will  be  less 
likely  and  propagation  from  piece  to  piece  would  be  prevented  for  small  particle 
sizes.  In  fact  for  small  particles,  the  impingement  data  would  be  more  pertinent. 
However,  if  initiation  occurs,  the  reaction  of  the  piece  itself  could  cause 
significant  damage.  Impact  tests  with  wet  explosive  should  be  accomplished  to 
determine  whether  this  scenario  is  indeed  credible.  If  large  pieces  are 
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frequently  fed  into  the  grinder  and  the  probability  of  initiation  even  with  the 
water  is  high,  this  scenario  could  occur  frequently.  In  fact,  testing  may  show 
that  such  initiations  are  the  "normal"  operating  condition  for  certain  materials 
that  are  to  be  fed  into  the  grinder. 

Drum  Dropped  by  Grippers 

The  three  highest  probability  scenarios  identified  by  the  fault  tree  analysis 
all  concerned  grippers.  Two  were  during  fork  lift  maneuvers  and  the  third  in¬ 
volved  the  dumper  grippers.  It  was  assumed  that  55  gallon  drums  80  percent  full 
are  used  to  carry  "dry"  and/or  slurried  energetic  material  into  the  bulk  incin¬ 
erator  building.  The  drums  are  transferred  by  forklift  to  the  feed  conveyer, 
by  conveyer  to  the  feed  hopper,  and  then  dumped  into  the  hopper. 

For  forklift  maneuvers,  the  operation  frequency  is  estimated  to  be  9 
batches  of  6  containers  per  day,  or  2.25  containers  per  hour.  The  forklift 
operator  will  improperly  grip  the  containers  5  out  of  every  1,000  attempts 
(human  error  probability).  It  is  judged  that  one  out  of  every  hundred  of  these 
errors  will  result  in  the  drum  slipping  from  the  grippers  and  falling.  When 
the  drum  slips  from  the  grippers,  it  is  likely  that  the  cover  will  be  pulled 
off  also.  The  initial  impact  of  the  bottom  of  the  drum  is  not  likely  to  re¬ 
sult  in  an  initiation;  perhaps  an  equivalent  initiation  probability  to  that 

w  I-' 

from  rough  handling  of  bombs  is  appropriate  for  this  initial  impact  (1.1  X  10 
initiations  per  trial);  however,  if  the  drum  then  proceeds  to  catch  on  equip¬ 
ment,  dump  over,  spill,  and  impact  on  its  lip  or  side,  initiation  is  much  more 
likely.  It  is  estimated  that  such  a  local  impact  could  produce  energies  up  to 
about  106  j/m2„  This  would  initiate  dry  explosive  materials  and  the  TIL  for 
TNT  solids  settled/water  wet  is  only  1.5  X  105  j/m2.  in  such  scenarios,  the 
bulk  of  the  material  in  the  drum  could  easily  be  at  the  impact  point  allowing 
propogation  to  occur.  It  is  judged  that  1/10  of  the  drums  that  are  dropped 
will  tilt  over  and  be  initiated  in  this  manner.  It  is  also  judged  that  most 
of  the  materials  in  the  drums  are  nearly  dry  or  moist,  but  are  not  primarily 
water.  Then  the  estimated  frequency  for  this  scenario  is  given  by: 
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f=  (2.25  containers }  (0.005  let  up  errors,  (  , 

nour  i  Set  up  error 


drum 


drop) 


/n  ,  drums  fall  overN  ,  ...  , .  ,  ^  . 

drums  dropped  (1  — --ms  VH.'t.h  explosivex 

all  drums  ' 


0-°  ^'ip^h??)  =  1-125  x  10"5/hour  =  4.7  x  10"2/year 

In  reality,  the  frequency  may  be  less  due  to  the  cover  possibly  remaining  in¬ 
tact,  due  to  higher  moisture  contents  in  many  of  the  drums,  and  due  to  some 
difficulty  in  having  the  ignition  occur  in  the  proximity  of  the  bulk  of  the 
material  present.  Impact  initiation  data  with  wet  explosives  would  be  helpful 
in  better  quantifying  this  hazard.  Very  little  data  of  this  type  now  exists. 

The  other  gripper  failure  scenario  (at  the  dump  hopper)  is  quite  similar 
in  all  respects  except  that  the  grippers  must  fail  mechanically  (due  to  lost 
structural  integrity).  This  will  be  much  less  likely  to  occur  than  where  the 
operator  in  the  corridor  does  not  grip  the  drum  properly. 

It  must  be  noted  that  forklift  operations,  because  of  the  operator  interface 
and  the  energy  potential  at  the  end  of  the  tines/grippers,  are  notoriously 
hazardous.  Potential  for  accidents  resulting  from  forklift  operations  should 
never  be  underemphasized.  Therefore,  operator  training,  licensing,  periodic 
retraining,  and  on-the-job  testing,  are  strongly  recommended. 


3.5  PROCESS  WATER  TREATMENT  PLANT 

Credible  hazards  involving  the  water  treatment  facility  are  primarily  con¬ 
fined  to  non-explosive  injuries  and  toxic  effects  of  explosives  and  chemicals. 
However,  certain  scenarios  involving  explosions  emerged  which,  although  marginal, 
cannot  be  ruled  out  entirely. 

One  scenario  is  concerned  with  a  runaway  reaction  taking  place  in  the 
coal  sand  filter  during  the  steam  phase  of  backwash  cycle.  The  steam  used 
is  maintained  at  15  psig,  or  approximately  120°C.  Although  exposure  to  steam 
at  this  temperature  would  not  normally  be  considered  dangerous,  it  has  been 
found  that  the  presence  of  certain  contaminants  may  greatly  reduce  the  critical 
temperature  necessary  for  thermal  explosion  in  explosive  materials  (see  Appendix  C). 
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One  example  of  this  phenomenon  has  been  reported  by  Groothuizen,  Lindeyer 
and  Pasman  (reference  10).  Experiments  conducted  during  an  investigation  of  a 
remelt  tank  explosion  showed  that  100  gms  of  TNT,  contaminated  with  cardboard 
fibers  (from  shell  casings)-  and  KN03,  would  self  heat  to  ignition  in  an  oven 
maintained  at  135°C  in  a  few  hours.  100  gms  of  TNT  contaminated  with  activated 
carbon  ignited  in  an  oven  at  the  same  temperature  in  as  little  as  15  minutes. 

The  authors  hypothesize  that  these  contaminants,  rather  than  being  chemi¬ 
cally  involved  in  the  decomposition  of  TNT,  exert  their  effect  in  two  ways. 

First,  the  absorption  of  TNT  by  a  solid  having  a  large  specific  surface  may 
enhance  the  rate  of  decomposition.  Second,  the  solid  when  combined  with 
insoluble  decomposition  products  of  TNT  may  form  a  dense  slurry  which  prevents 
convective  heat  transfer,  allowing  local  heating  to  occur.  In  support  of  this 
explanation,  similar  behavior  was  observed  using  samples  of  TNT  contaminated 
with  glass  wool. 

The  point  of  this  discussion  is  that  we  cannot  be  usre  of  the  effect  of 
anthracite  coal,  a  high  specific  surface  substance,  on  the  critical  tempera¬ 
ture  of  the  explosives  to  be  processed  at  Hawthorne.  From  the  pilot  plant 
study,  it  is  estimated  that  a  layer  of  explosive  2  inches  in  thickness  above 
the  bed  and  penetrating  11/2  inches  into  the  bed  will  be  present  in  the  filters 
prior  to  backwash.  All  ratios  of  contaminant  to  explosive  will  be  represented 
somewhere  in  the  penetrating  layer. 

Normally  the  steam  phase  of  backwash  lasts  only  for  5  minutes.  It  is  not 
anticipated  that  this  short  exposure  will  cause  any  problems.  The  duration  of 
backwash  may  be  extended,  however,  due  to  mechanical  failures  or  operator  error. 
Should  the  steam  phase  of  backwash  last  for,  say  4  hours,  the  outcome  is  less 
clear.  The  water  treatment  facility  is  highly  automated  and  checked  periodi¬ 
cally  rather  than  monitored  continuously.  The  filters  backwash  in  sequence. 
Should  one  filter  become  "stuck"  at  some  point  in  the  backwash  cycle,  there 
are  no  obvious  cues  to  inform  the  operator  that  something  unusual  is  happening. 
It  is  likely  that  such  an  extended  steam  phase  will  go  unnoticed. 

Several  failures  can  cause  an  extension  of  the  steam  phase  of  backwash. 

The  cam  timer  which  controls  the  sequence  of  steps  could  malfunction,  or  be 
set  improperly.  Loss  of  plant  compressed  air  would  prevent  the  operator  of  pneu¬ 
matic  cylinders  from  closing  the  flow  of  steam.  The  operator  could  valve  off 
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the  compressed  air  supply  by  mistake. 

A  number  of  unknowns  exist  concerning  this  scenario.  The  coal  may  have 
no  catalytic  effect.  The  steam,  which  is  injected  roughly  30  inches  below 
the  top  of  the  coal  bed,  may  cool  sufficiently  before  it  reaches  the  explosive. 
Steam  condensate  or  the  latent  liquid  in  the  coal  may  act  as  enough  of  a 
heat  buffer  for  any  heat  generated  by  decomposition.  However,  no  data  is  available 
which  conclusively  rules  out  the  possibility  of  such  a.  scenario. 

It  is  recommended  that  tests  be  conducted  to  determine  the  catalytic  effect, 
if  any,  of  anthracite  coal  on  the  decomposition  of  the  explosives  to  be  present 
at  Hawthorne  and  to  characterize  such  reactions  in  terms  of  critical  temperature 
and  time  to  explosion.  In  such  an  experimental  investigation,  it  would  be  pru¬ 
dent  to  consider  temperatures  at  least  as  low  as  summer  environmental  conditions. 
Test  conditions  should  duplicate  those  actually  present  in  the  coal  sand  filter 
during  backwash,  as  closely  as  possible. 

Another  scenario  involving  fire  or  explosion  was  the  use  of  steel  shovels 
rather  than  non-metal  (e.g.  wooden)  ones  for  major  cleanup  in  the  sludge  basin 
or  trough,  combined  with  cracks  or  fissures  in  the  basin  or  trough.  These 
fissures  allow  a  degree  of  containment  which  enables  relatively  small  amount  of 
explosive  to  transition  to  detonation.  It  is  recommended  that  only  non-metal 
shovels  be  allowed  in  the  area,  and  that  the  basin,  sumps,  troughs,  and 
clarifier  be  regularly  inspected  for  cracks.  It  is  recommended  that  non-metal 
shovels  be  used  in  such  facilities,  if  shovels  are  used  at  all. 

More  credible  scenarios  are  available  for  toxic  effects  of  explosives. 

One  such  scenario  concerns  explosive  exposure  during  cleaning.  If  it  is  assumed 
that  structures  such  as  the  flotator  clarifier  and  backwash  recovery  tank  will 
be  cleaned  periodically  with  a  steam  or  steam-water  spray,  the  person  spraying 
will  be  exposed  to  a  mist  of  fine  water  droplets,  many  contaminated  with  explosive. 
Explosive  in  such  a  form  may  be  inhaled  or  absorbed  through  the  skin.  Even  if 
masks  and  protective  clothing  are  worn,  leakage  may  be  a  problem.  IITRI  fault 
tree  analysis  indicates  these  problems  are  far  more  prevalent  than  the  explosion 
than  the  explosion  scenarios  mentioned  above. 

Other  scenarios  appeared  which  are  not  exclusive  to  explosive  treatment 
plants.  Spillage  or  splashing  of  sulfuric  acid  or  alum  during  pump  or  line 
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maintenance  were  judged  probable.  A  simple  fall  from  the  ladder  on  the  carbon 
columns  was  also  likely,  owing  to  the  lack  of  a  safety  cage  and  the  frequency 
with  which  the  ladder  will  be  used  (e„g.  used  in  haste,  with  wet  footing,  etc.) 

Another  scenario  concerned  possible  mixing  of  activated  carbon  with  sulfuric 
acid,  resulting  in  the  release  of  highly  toxic  SO2  fumes.  Activated  carbon 
will  probably  be  present  in  the  treatment  room  as  replacement  for  carbon  in 
the  columns.  Should  it  be  stored  near  the  sulfuric  acid  line  or  near  the 
sulfuric  acid  pit,  and  a 'leak  in  the  line  occur,  SO2  fumes  could  be  generated. 
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4.  CONCLUSIONS  AND  RECOMMENDATIONS 


In  this  section,  recommendations  scattered  throughout  this  report  and 
appendices  have  been  consolidated.  Additional  suggestions,  in  the  category  of 
"good  practices"  are  also  included,  although  they  did  not  necessarily  emerge 
directly  from  the  hazards  analysis.  The  recommendations  are  listed  below  for 
each  plant  area  covered  under  Priority  1: 

North  Tower  and  Refining  Building 

•  It  is  strongly  recommended  that  a  comprehensive  experimental 
program  be  conducted  to  evaluate  the  potential  for  thermal 
explosion  in  liquid  explosive  holding  vessels  with  realistic 
contaminants  and  aged  materials.  Small  scale  tests  of  the  types 
conducted  at  China  Lake  (reference  11)  and  in  Hdlland  (reference 
10)  may  not  be  an  adequate  simulation  of  the  conditions  in  the 
actual  liquid  explosive  holding  vessels  at  WADF,  e.g.the  tests 
may  be  too  small ,  agitation  effects  are  not  considered,  and 
localized  contaminants  are  not  considered.  Therefore,  it  is 
recommended  that  several  large  scale  simulation  tests  be  con¬ 
ducted,  with  and  without  agitation,  with  uniform  and  localized 
contaminants,  etc.  in  order  to  identify  where  the  small  scale 
tests  are  valid  and  how  to  interpret  the  test  results  in  terms 
of  the  actual  system  conditions.  For  those  conditions  where 
small  scale  tests  are  valid,  it  is  recommended  that  tests  of 
the  type  conducted  at  China  Lake  or  in  Holland  be  conducted 
with  relevant  explosives  and  contaminants  not  previously  tested. 

This  will  permit  us  to  better  map  out  problem  areas. 

•  The  existing  system  for  protecting  against  thermal  explosion 

in  the  liquid  explosive  holding  vessels  at  WADF  is  not  expected 
to  provide  adequate  protection  in  the  event  of  a  runaway  reaction. 

The  options  available  for  modifying  the  WADF  system  in  this 
regard  include  use  of  an  undersurface  deluge  with  swirl,  enhanced 
agitation  upon  sensing  a  temperature  excursion,  temperature 
sensing  at  several  locations  within  the  vessel,  and  incorporation 
of  a  large  drain  line  for  dumping  the  contents  quickly.  It  is 
recommended  that  options  such  as  these  be  evaluated  further  to 
determine  the  optimum  approach.  Selected  specific  recommenda¬ 
tions  in  this  regard  are  provided  below. 

•  The  onset  of  runaway  is  expected  to  be  localized  and  a  single 
thermocouple  (such  as  in  the  existing  WADF  system)  is  not  likely 
to  be  at  the  right  place  to  achieve  a  quick  response.  In  order 
to  better  sense  the  onset  of  a  runaway  reaction,  the  use  of 
temperature  sensors  covering  a  variety  of  locations  within  the 
vessel  should  be  considered.  The  more  locations  that  are  kept 
under  observation,  the  better  the  chance  that  the  event  will 
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be  sensed  early.  Therefore,  it  is  recommended  that  an  investi¬ 
gation  be  conducted  to  determine  the  optimum  type,  number,  and 
locations  of  temperature  sensors  for  achieving  the  earliest 
possible  detection. 

•  In  the  event  of  a  runaway  reaction,  dumping  the  contents  of 
the  vessel  to  pans  using  the  existing  system  should  be  accom¬ 
plished  if  no  better  alternative  exists.  Operators  should  be 
made  aware  that  the  dump  may  not  be  fast  enough,  and  they  should 
evacuate  the  area  quickly.  It  is  strongly  recommended  that  a 
faster  response  (large  drain)  dumping  system  be  evaluated  for 
incorporation  into  the  liquid  explosive  holding  vessels  at  WADF. 
This  might  be  accomplished  by  modifying  the  existing  vessels 

or  may  require  installation  of  a  totally  new  system. 

•  It  is  recommended1  that  the  valves  in  the  drain  lines  beneath, 
the  melt  kettles  and  the  separator  be  moved  as  close  as  possible 
to  the  vessel  to  eliminate  the  dead  space  in  the  pipes. 

•  It  is  recommended  that  the  potential  for  initiation  of  liquid 
explosive  inside  a  liquid  explosive  holding  vessel  due  to 
impeller  impacts/scraping  against  the  vessel  wall  be  experi¬ 
mentally  evaluated  by  simulating  the  actual  conditions  in  the 
vessel  for  this  scenario. 

•  It  is  recommended  that  a  plastic  coating  be  considered  on  the 
separator  dip  stick.  The  plastic  coating  will  reduce  the 
potential  for  impact  initiation  but  may  increase  the  possibility 
of  electrostatic  discharge*. 

•  It  is  recommended  that  a  static  device  be  designed  to  assure  that 
the  separator  dip  stick  is  automatically  cleaned  off  prior  to 
re-entry  into  the  vessel. 

•  During  major  maintenance  involving  removal  of  melt  kettle  or 
separator  covers,  extreme  care  should  be  taken  to  assure  that 
the  impeller  will  not  contact  the  vessel  wall  during  operation. 

•  The  screen  in  the  line  leading  into  the  North  Tower  separator 
vessel  should  be  checked  periodically  for  structural  integrity. 

t  The  credibility  should  be  evaluated  for  the  scenario  mentioned 
in  Section  3  in  which  a  piece  of  solid  explosive  forms  in  a 
low  point  in  the  drain  hose  between  the  tilt  table  to  the 
separator  vessel  and  breaks  loose  impacting  the  grate  above 
the  separator.  The  velocity  achieved  by  the  piece  and  the 
potential  for  initiation  are  uncertain.  Simulation  tests  are 
recommended  to  better  evaluate  this  potential  hazard. 

•  It  is  recommended  that  a  vacuum  trap  be  put  in  the  lines  between 
the  melt  kettle  and  the  vacuum  pump,  to  minimize  the  possibility 
of  liquid  explosive  getting  into  the  pump. 
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•  Prior  to  major  maintenance  on  vessels  in  the  facility,  the 
vessels  should  be  thoroughly  drained  and  steamed  out.  Even 
if  a  film  of  explosive  remains  in  the  vessel,  the  potential 
exists  for  the  film  to  "flash"  and  injure  the  maintenance 
personnel  present. 

•  Throughout  the  North  Tower  and  Refining  Building,  the  piping 
and  ledges  present  are  a  maze  of  collection  points  for  explo¬ 
sive  dust  layers  to  develop.  Cleanup  is  quite  difficult.  The 
major  potential  hazards  are  "flash"  reactions  that  could  injure 
personnel,  as  well  as  a  possible  "train"  for  the  reaction  to  get 
to  a  larger  quantity  of  material,  elsewhere  in  the  building,  e.g. 
an  open  item.  The  best  solution  to  this  problem  is  frequent  hose- 
down  of  all  the  equipment,  piping,  ledges,  etc. 

•  Use  of  plastic  tipped  lances  for  steamout  in  the  North  Tower 
should  be  considered.  A  plastic  tip  would  reduce  the  chance 
for  impact  initiation  during  steamout,  but  the  potential  for 
ESD  should  be  evaluated  before  making  such  a  change. 

•  Insulation  on  steam  lines  within  these  buildings  could  pose  a 
contamination  problem.  If  a  crack  develops  in  the  shell  and 
explosive  dust  builds  up,  a  fire  or  explosion  could  eventually 
occur.  This  is  a  potential  problem  of  major  importance.  Fre¬ 
quent  inspections  should  be  made  of  the  insulation’s  condition. 

Rotoclone  Cleaners  and  Duct  Work 


•  Air  handling  ducts  should  be  inspected  and  cleaned  frequently 
to  avoid  any  significant  buildup  of  an  explosive  dust  layer 
inside  the  ducts.  Periodically  flushing  out  this  system  (e.g. 
with  hot  water)  should  be  considered  to  minimize  the  buildup. 

•  The  Rotoclone  should  be  tested  frequently  to  assure  efficient 
operation.  The  inside  walls  of  equipment  and  ducts  downstream 
of  the  scrubber  should  be  inspected  to  assure  that  a  dust/ 
residue  layer  is  not  developing. 

South  Tower 


•  Yellow  D  solubility  in  water  is  extremely  sensitive  to  tempera¬ 
ture.  This  results  in  a  real  potential  for  plateout  of  Yellow  D 
within  the  south  tower  equipment  requiring  hazardous  cleanup. 
Therefore,  it  is  recommended  that  alternate  methods  of  treating 
Yellow  D  be  considered. 

•  Yellow  D  is  an  extremely  toxic  material.  Great  care  must  be 
exercised  to  protect  operators  from  becoming  exposed  to  this 
material.  It  should  also  be  recognized  that  A-3  being  processed 
in  the  South  Tower  can  become  contaminated  with  Yellow  D  if 
equipment  is  not  thoroughly  cleaned  between  operations.  Per¬ 
sonnel  handling  the  A-3  may  then  be  exposed  to  Yellow  D  without 
knowing  it.  It  is  recommended  that  an  industrial  hygenist 
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specify  appropriate  protective  clothing  and  breaking  apparatus 
for  workers  in  this  area. 

•  Transport  of  Yellow  D  to  the  bulk  incinerator  is  of  concern. 

The  transport  containers  apparently  have  been  designed  such 
that  the  temperature  will  remain  sufficiently  high  during 
transport  to  avoid  plate  out.  If  an  unanticipated  delay  occurs 
in  transit  (this  is  not  that  unlikely)  Yellow  D  could  plate  out 
within  the  vessel.  Redissolving  the  Yellow  D  before  dumping 
the  contents  into  the  slurry  tank  at  the  bulk  incinerator  is 
likely  to  be  a  hazardous  operation.  It  is  recommended  that  _ 
emergency  procedures  be  developed  for  this  situation.  Redesign 
of  the  vessel  and  planned  burning  or  detonation  of  the  vessel 
should  be  considered  as  options. 

•  The  structural  integrity  of  the  floor  grating  within  the  South 
Tower  should  be  evaluated  to  assure  that  the  heavy  items  that 
are  to'  be  handled  will  not  fall  through  the  grating  if  an  item 
is  set  down  on  the  fourth  level. 

Bulk  Explosives  Disposal  Building 

•  It  is  recommended  that  tests  be  conducted  to  simulate  large  chunks 
of  explosive  being  put  into  the  grinder.  It  should  be  determined 
whether  such  large  pieces  will  ignite  by  impact  in  the  grinder  with 
and  without  water  present.  The  consequences  of  such  a  reaction 

is  also  of  concern  -  i.e,  will  the  result  be  "fire  cracker  type 
explosions  or  a  more  massive  event  with  propagation  between  pieces 
of  material?  It  is  anticipated  that  the  "fire  cracker"  type  event 
will  occur  and  possibly  could  damage  the  equipment. 

•  Assure  that  the  hydraulic  fluid  being  used  has  been  evaluated 
for  compatibility  with  the  explosives  and  propellants  to  be 
processed  -  this  really  should  be  done  for  the  total  plant. 

•  Although  great  care  is  taken  to  prevent  steel  drums  containing 
waste  material  from  impacting  each  other  in  the  bulk  explosives 
disposal  building,  it  is  possible  that  drums  can  impact  each 
other  while  stacked  more  closely  enroute  to  the  building,,  Care 
should  be  taken  to  assure  the  outsides  of  the  drums  are  clean 
prior  to  transport  and  that  the  drums  somehow  be  spaced  on  the 
cart  to  prevent  drum  to  drum  impact. 

•  At  the  metal  detector  feeding  the  grinder  in  the  bulk  explosives 
disposal  building,  if  metal  is  detected  it  still  could  be  carried 
into  the  grinder  by  residual  water  -  i.e.  there  is  no  positive 
action  taken  to  prevent  the  metal  from  continuing  downstream. _ 
Therefore,  it  is  recommended  that  a  side  chute  and/or  automatic 
gate  be  incorporated  at  the  metal  detector  to  prevent  metal  from 
being  carried  into  the  grinder. 
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•  When  changing  the  grinder  blades,  the  grinder  wheel  should  not 
be  rested  on  the  floor  grating,  unless  the  structural  integrity 

of  the  grating  has  first  been  evaluated  to  assure  that  the  grinder 
will  not  fall  through. 

Process  Water  Treatment  Plant 

•  It  i s  recommended  that  tests  be  conducted  to  determine  the 
catalytic  effects,  if  any,  of  anthracite  coal  on  the  decompo¬ 
sition  of  explosives  and  mixtures  of  explosives  present  in 
the  process  water  treatment  plant. 

•  It  is  recommended  that  metal  shovels  not  be  used  under  any  circum¬ 
stances  for  cleaning  the  sumps  at  the  process  water  treatment 
facility.  Non-metal  shovels,  brushes  and  brooms,  vacuuming,  etc. 
are  more  desirable  options  that  should  be  evaluated  for  this 
purpose. 

•  At  Hawthorne,  the  process  water  treatment  plant  situation  is 
different  from  that  at  other  explosives  plants.  At  Hawthorne, 
mixtures  of  a  wide  variety  of  propellants  and  explosives  must_ 
be  processed  -  not  just  a  single  material.  As  long  as  water  is 
present  in  large  quantities  there  should  not  be  a  problem. 

However,  if  water  is  drained  from  components  and  materials  are 
allowed  to  dry  during  a  shutdown,  dry  mixtures  of  energetic 
materials  of  unknown  characteristics  will  be  present.  It  is, 
therefore,  recommended  that  components  be  kept  flooded  during 
such  shutdowns.  * 


General 

•  Every  operation  on  every  equipment  item  must  be  covered  by  a 
written  procedure,  reviewed  and  approved  by  operating  and  safety 
management  personnel. 

•  A  comprehensive  training  program  should  be  required  for  all 
plant  personnel,  including  information  on  potential  hazards. 

•  All  equipment  operators  should  be  given  appropriate  training 
courses  and  certified  or  licensed  for  operations  in  which  they 
will  be  involved. 

•  All  plant  personnel  should  be  tested  for  electrical  grounding 
of  footgear  at  least  once  a  day  with  a  sign-in  sheet. 

•  Area  surfaces  should  be  kept  wet  during  maintenance  as  part 
of  the  procedure. 

•  It  is  recommended  that  a  2  locker  system  be  adopted  for  plant 
personnel.  One  locker  should  be  for  street  clothes  and  a 
second  locker  for  work  clothes.  All  clothing  should  be  changed 
at  the  beginning  and  end  of  the  shift.  Clothing  should  be 
supplied  by  the  plant  -  nothing  taken  home.  A  shower  should 


be  taken  enroute  from  taking  off  work  clothes  to  putting  on 
street  clothes.  This  procedure  will  also  help  avoid  street 
shoes  being  mistakenly  worn  in  the  plant  areas. 

t  An  area  entry  and  hot  work  permit  program  should  be  set  up 
to  assure  that  all  temporary  repairs  and  maintenance  operations 
are  well  thought  out  and  accomplished  with  several  levels  of 
management  checks. 

•  During  maintenance,  tools  should  be  connected. to  the  workmen 
by  a  cord  to  help  break  the  fall  of  the  tool  if  it  is  dropped. 

§  Strict  cleanliness  must  be  enforced  at  all  times  in  the  plant, 
particularly  when  personnel  leave  contaminated  areas  to  go  to 
lunch  or  at  the  end  of  the  shift.  Nothing  should  be  eaten  in 
the  work  area.  No  food  should  be  allowed  in  the  work  area. 

•  A  medical  surveillance  program  should  be  set  up  to  screen 
personnel  for  specific  jobs  at  hiring  and  to  assure  that  long 
term  health  damage  is  avoided. 

•  It  is  recommended  that  a  compatibility  data  library  be  set  up 
at  WADF.  Whenever  a  new  material  is  to  be  handled  anywhere  at 
the  site  the  existing  data  should  be  searched  for  potential 
problems.  If  the  existing  data  base  is  insufficient  to  evaluate 
the  new  material,  a  battery  of  compatibility  tests  should  be 
run  on  the  material. 

•  Existing  calculation  methods  for  estimating  the  electrostatic 
discharge  energy  produced  by  a  charged  dielectric  surface 
generally  overestimate  the  spark  energy  in  this  type  of  ESD 
scenario.  The  actual  spark  energy  cannot  be  calculated  using 
such  methods.  IITRI  has  developed  a  simple  model  for  estimating 
this  spark  energy  from  a  dielectric  surface.  The  model  lacks 
the  required  input  parameter  values  and  validation. .  It  is 
suggested  that  tests  be  conducted  to  provide  these  inputs  and 

to  validate  the  model.  This  will  provide  a  much  improved 
quantitative  analysis  method  for  ESD  hazards  associated  with 
dielectric  surfaces. 
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Final  Note 


Appendix  E  to  this  report  is  a  compilation  of  incidents  that  have  occurred 
in  explosive  and  propellant  operations  in  facilities  in  the  United  States.  The 
appendix  consists  of  short  descriptions  of  the  incidents  grouped  with  regard 
to  the  type  of  process  operation  involved.  The  information  was  extracted  from 
Department  of  Defense  Explosives  Safety  Board  Files  under  a  prior  contract  con¬ 
ducted  for  ARRADCOM. 

Although  the  process  operations  listed  are  not  for  demilitarization,  many 
similarities  exist.  It  is  suggested  that  the  table  be  scanned  so  that  the 
reader  obtains  a  sense  for  hazardous  events  that  have  occurred  in  the  past. 

In  reviewing  hazards  analyses,  people  generally  are  torn  between  concern  for 
safety  and  non-belief  Of  scenarios  that  do  not  appear  credible.  It  must  be 
remembered  that  facilities  are  never  designed  to  include  the  obvious  hazards. 
Hazards  that  remain  are  generally  low  probability,  requiring  several  failures 
to  occur.  Yet,  incidents  do  occur.  It  is  the  function  of  hazards  analysis 
to  minimize  the  likelihood  of  such  things  happening. 
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APPENDIX  A  - 

MODEL  FOR  EVALUATION  OF  ELECTROSTATICS  HAZARDS 
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Model  for  Evaluation  Electrostatics  Hazards 


Many  of  the  electrostatics  hazards  considered  can  be  viewed  in  terms  of 
charging  an  equivalent  capacitor.  The  circuit  shown  in  Figure  A1  is  a  reasonable 
model  for  many  of  these  scenarios. 


Figure  A1  ESD  Circuit  Model 

For  example,  the  charge  may  be  carried  from  one  location  to  another  by 
the  flow  of  a  powder  between  system  components,  a  steam  jet,  or  the  shuffling  of 
an  operators  ungrounded  shoes.  In  each  case,  the  rate  of  charge  transfer  can 
be  viewed  as  a  constant  current  power  source,  i-n.  The  components  collecting 
or  separating  charge,  have  an  equivalent  capacitance  C,  and  the  charge  can 
drain  back  to  "ground"  level  through  some  resistance,  R;  in  some  cases  R  may 
be  essentially  an  infinite  resistance  while  in  others  R  may  be  effectively  a 
short  circuit.  For  the  circuit  being  considered  the  charge,  Q,  stored  in  the 
capacitor  can  be  shown  to  increase  by  the  following  relation: 

Q  =  finRc(-e^) 
where  t  is  time. 

Thus,  the  maximum  charge  attainable  is  Qmax  =  i.RC.  The  maximum  voltage 
attainable  is  consequently: 

Vmax  =  ^  =  i  r 

l  in 


A1 


The  energy  associated  with  this  voltage  level  is 


e  =  %  CV2 

and  the  characteristic  time  required  to  achieve  this  energy/voltage  level 


is 


t  *  RC 


CHARGING  RATE 


To  estimate  the  rate  of  charge  transfer,  ,  the  analyst  estimates  the 

mass  flux  m  0f  charge  carrier  between  the  source  and  the  taraet,  and  multi¬ 
ples  this  value  by  the  average  charge  per  unit  mass  of  the  carrier  medium  j=|. 

iin  =  m  (M} 

for  estimating  the  charge  per  unit  mass  the  following  information  can  be 
useful. 


Max.  Charge/Particle  (Ref.  Al) 

-4  -2  / 

Q  =  3.3  X  10  a  Coulombs/  Q  n  0  Coul 

(m  '  °’2  ~kT 

where  'a'  is  the  particle  radius  in  meters 
Water  Sprayed  By  Means  of  Airblast  (Ref.  Al) 

£  =  10’6  Coul 


is  typical  for  ly  particles 


icles^ 


J 


M 


Kg 


Liquids  Such  As  Transformer  Oil  and  Butyl  Esters  Disrupted  To  Form  Droplets 

(Ref.  Al)  . 

Coul 


5.  =  5  23 
M  Kg 


Electrostatic  Spraying  Experiments  With  Octoil  (diffusion  pump  oil) 

2y  Particles  (Ref.  Al) 

Q  _  a  ~jcc  Coul 
M  "  U-765  ~kT 

Coal  Dust  Suspension  Charged  By  Impacts  (Ref.  A?1 
mean  particle  size  =  16p 

§•  »  0.5  to  2.3  X  10"3 

Electrostatically  Active  Powders  Such  As  Starch  and  Cabosil  (Ref.  A3) 


Q  in“3  Coul 
M  ^  10  Kg 


A2 


Water  Mist  Developed  While  Washing  Out  Ship  Tanks  (Ref.  A4) 

§■  =  3.65  X  TO-8  Coul 

M3  . 

estimated  to  be  about 
3.13  X  10‘8 

Ng 

"Charge  Densities  For  Selected  Process  Materials  As  Determined  In 
Controlled  Chutinq  Experiments".  Ref.  A5) 


CAPACITANCE 


Plastic  Flake 
Benzidine  yellow 
Gilsonite 
TNT 


7.1  X  10"  7  Coul /Kg 
9.4  X  10T6  Coul /Kg 
2.6  X  10-6  Coul /Kg 

2.1  X  10"7  Coul /Kg 


The  capacitance,  C,  is  the  charge  storage  capacity  per  unit  voltage  of 
the  component  being  considered.  The  capacitance  is  a  function  of  the  configu- 
ation  of  the  component,  and  most  real  configurations  are  too  complex  to  evaluate 
exactly.  However,  two  simple  configurations  serve  to  characterize  most  situa¬ 
tions  of  interest.  These  are  the  parallel  plate  capacitor  and  a  spherical  body 
at  some  distance  above  a  grounded  plane  surface.  The  capacitance  of  most  con¬ 
figurations  can  be  estimated  reasonably  well  by  one  of  these  models  or  some 
combination  of  spheres  and  parallel  plate  capacitors. 

For  a  parallel  plate  capacitor,  the  capacitance  is  given  by 


where.  eQ  is  the  permittivity  of  free  space  (8.85  X  10"12  k  is  the 
dielectric  coefficient  of  the  material  separating  the  plates,  A  is  the  surface 
area,  and  i  is  the  separation  distance. 


For  a  sphere  above  a  grounded  plane  (see  Figure  A2)  the  capacitance  is  given 


by 


(2-jr  ) 

C  =  2tt£  R  - g- 

°  (1T> 
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As  the  ratio  of  R  to  H  approaches  0  (i.e.  sphere  in  space)  the  capacitance 
approaches  4ite  R.  For  many  configurations  R/H  is  much  smaller  than  1  and  this 
approximation  is  valid.  Sphere  capacitances  are  listed  below  for  a  number  of 
sizes  of  possible  interest. 

Size/ 1  tern  Capacitance  (pf) 


2.54  cm  (1  inch)  Diameter  1.4 

15  cm  (6  inch)  Diameter  8.5 

0.3  m  (1  ft)  Diameter  17 

0.9  m  (3  ft)  Diameter  100 

3  m  (10  ft)  Diameter  340 

truck  2000 

large  tank  5000 


DISCHARGE  FLUX  RESISTANCE 

In  any  electrostatic  hazard  configuration,  some  region  or  component  is 
being  charged  and  there  is  a  minimum  resistance  path  back  to  ground  level  for 
the  charges  to  drain.  In  some  cases,  this  discharge  path  resistance  is  quite 
large,  and  charges  will  stay  fixed  for  a  long  period.  In  other  cases,  there 
can  be  essentially  a  short  circuit  back  to  ground  level  and  charges  will  drain 
as  fast  as  they  are  collected. 


The  resistances  can  be  estimated  based  on  the  characteristics  of  the  path 
back  to  ground.  For  situations  in  which  the  electric  current  will  pass  through 
a  body  of  material,  the  bulk  resistivity  p  is  pertinent.  The  resistance  of  the 
path  is  then  given  by  D  _  £ 

K  "  p  A 
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If  the  resistance  is  controlled  by  surface  characteristics,  the  surface 
resistivity  a  is  used. 


where  w  is  the  width  of  the  path. 
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Survey  of  Compatibility  Data 


For  purposes  of  the  hazards  analysis  of  the  WADF  facility,  the  compatibility 
data  represented  in  Table  B-l  were  surveyed.  Compatibility  studies  are 
generally  concerned  with  problems  such  as  slow  decompositions  leading  to  poor 
quality  product,  and  corrosion  effects  that  may  take  extremely  prolonged  time 
periods  to  develop,  in  addition  to  formation  of  undesireable  compounds  and 
inducing  runaway  reactions.  For  the  purposes  of  the  WADF  hazards  analysis, 
the  concern  is  limited  to  induced  runaway  reactions  and  formation  of  sensitive 
compounds  such  as  primary  explosives. 

Results  of  compatibility  studies  typically  categorize  materials  being 
a)  compatable  (very  stable),  b)  questionable  (some  reactions  observed,  but 
these  may  or  may  not  be  significant)  and  c)  definitely  incompatible.  By  far, 
the  great  majority  of  the  results  are  in  the  "questionable"  category.  For  the 
purposes  of  this  survey,  only  those  combinations  shown  to  be  definitely  incom¬ 
patible  or  definitely  compatible  have  been  highlighted.  These  incompatible 
combinations  are  the  most  likely  to  lead  to  formation  of  sensitive  compounds 
or  to  induce  a  runaway  reaction  at  elevated  temperatures. 

The  available  data  represents  new  and  uncontaminated  materials,  whereas 
the  explosives  at  WADF  are  aged  and  may  contain  contaminants  that  are  difficult 
to  identify.  It  must  be  emphasized  that  this  survey  should  not  be  taken  as 
the  final  work  on  potential  compatibility  problems.  Rather,  it  should  be  viewed 
only  as  indicating  general  types  of  potential  problems  that  may  be  encountered. 
The  compatibility  survey  results  are  summarized  on  the  following  pages.  The 
shorthand  notations  used  in  the  referenced  data  sources  for  many  materials  are 
used  in  the  summary. 
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TABLE  B-l  COMPATIBILITY  REFERENCES 


1.  Dangerous  Materials  Compatibility  Study,  Wayne  R.  Wilcox,  General  Electric 
Company,  February,  1973. 

2.  Pantex  Compatibility  Information  On  the  Western  Area  Demilitarization 
Facil ity. 

3.  Naval  Weapons  Station,  Yorktown,  Virginia,  Compatibility  Information. 

4.  Bacchus  Compatibility  Information  on  the  Western  Area  Demilitarization 
Facil  ity. 

5.  Encyclopedia  of  Explosives,  Ordnance  Technical  Intelligence  Agency,  Durham, 
North  Carolina. 

6.  Darcom-R  Safety  Manual  No.  385-100,  17  August,  1981. 

7.  DTIC  Picatinny  Arsenal  Technical  Report,  Project  No.  TM3-5003,  Report  No.  1, 
November,  1950. 

8.  Lawrence  Livermore  Laboratory,  Compatibility  Data. 

9.  Explosives  Engineering  Design  Handbook. 

10.  Explosivstoffe  Nr5/1  970. 

11.  Thermal  Decomposition  of  Explosives,  Parts  1,  2,  8. 
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AMATOL 


60-40  TNT/40-60  AN 


Incompatible 

Copper 
Tin 

Durez-12041,  Wet-Eccesive  Reaction 
Actex 
Actusol 
CA8955 
CK1350 
LL24459 
LL24044 

Hardware  Laquer 
CWS  Red 

DuPont  Rhodamine  B  Extra 
CWS  Green 
DuPont  Oil  Yellow 
Most  Waxes  in  General 
Dehydrated  Wax  3238 
Varnish 

Alox  L-1136  &  A! ox  1263 
Shellac 

Olive  Drab  Paint  &  Pettman  Cement 
In  Contact  w/  50/50  Amatol 
Protective  Coatings  (Lacquer  &  Primers) 
For  T-6E1  &  T-7  Antitank  Mines 


Dyes 


More  Metals 


Cronak  Coated  Steel  Plate 
Black  Anozinc  Uni  chrome 
Zinc  Plated  Steel  @  65°C  &  Moisture 
Black  &  Yellow  Anozinc 

Uni  chrome  Zinc  Plated  Steel  w/Moisture  @  65°C 
RED  Phosphorous  -  Decomposition  @  5 %  level 
Vulcanized  Fiber  Tubing 

(from  Dewey  &  Almax  Chem  Co.) 

All  Lacquer  Protective  Coatings 
Gum  Rubber  "A"  B3501 
-Not  advisable  to  use  w/any  rubber 
Hycar,  Neoprene,  Butyl,  etc. 

No  Petroleum  Hydrocarbon  Above  100°C 
Steel  -  Acid  Proof  Black  Paint  Coated 
-  Copper  or  Tin  Plated 
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AMATOL  Cont'd 


60-40  TNT/40-60  AN 


Compatible 
Plastic  -  PVC 

Pencolite  Adhesive  6-1215  Dry 
Durez  -  12041  Dry  ~ 

Zinc  Chromate 
Sodium  Di chromate 

Wyandotte  Cleaners 

No.  147  (Na  Silicates  &  Alumi nates] 

MK-50  (Saponified  Neutral 
Petroleum  Derivatives)  Used  in 
Cleaning  Bomb  Surface 

Rust  Inhibitor,  Polar 

(Mf'd  by  Indep.  Oil  Co,  of  St.  Louis,  MO) 

Rust  Preventatives 
Navy  Spec  52C18 
6d  II,  Spec.  AX5-1759 

DuPont  Primers 

An  Chromate,  1063-073,  Spec  PXS783 
Rust  Resistant  1063-075  Spec  PXS946 
Acid  Alkali  Resistant  P373-P-1 2263 
Lacquer  Resisting  PI 063-0-1 31 28 
Redoxide  -  Phenolic  P-323-P-1 31 27 

Protective  Coating 
Brevon  Coating  #2  in  APCO  Solvent 

Decontaminating  Agent 
Dilute  Alkaline  Hypochloride  Solution 
Less  than  5%  -  There  Is  Better 
Material  For  This  Purpose 

Dyes 

Cal co  Oil  Scarlet  II 
CW6  Violet 


Metals 


Iridite  Treated  Plated  Steel  Strip  @  65°C 


U.S.  Rubber  Co.'s  Rubber  Beakers 

Less  than  1%  ZnO  in  50/50  Amatol 
Is  OK  Heated  to  100°C 


1 1 T  RESEARCH  INSTITUTE 

B4 


AMMONAL 


(22AN/57TNT/11AL) 


Incompatible 

Rust  Preventative  on  Fuse 
Threads  in  Shell  &  Bombs 
Spec.  AXS-1759 

Effect  of  High  Voltage 
X-Rays  on  Stability  of 

Ammonal  -  Based  on  gas  evolved  by  5gm  sample  in  40  hours 
(120°CX  Vacuum  Stability  Test) 
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AMMONIUM  NITRATE 


Incompati bl e 


Copper  &  Moisture 

Hydrides 

Phosphide 

Carbide 

Chlorides 

Sulfur 

Nitro bodies 

Charcoal 

Metallic  Nitrates 
Metal  Powders 
Petroleum  Derivatives 
Oxidizable  Carbonaceous  Materials 
Zinc/Galvanized  Materials  (lowers 
decomposition  temp,  to  93.3°C) 

Red  Phosphorous 
UV  Light  -  Decomposes 

A1  Powder  with  Greater  Than  0.25%  Moisture 
Fertilizer  Grade  AN  (FGAN) 

FGAN  (NHyN0~)  Admixture  w/oil ,  sawdust,  asphalt,  iron,  water  at  120°C  vac 

Picric  Acid"3-  DecreaseSgStabil ity 

Zinc  Power  Admixed,  120u  vac  explodes  above  100°C 
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AMMONIUM  NITRATE  Cont'd. 


Compatible 

AT  Powder  w/Dry  NH^NO^ 

or  NH^Oj  <0.25%  Moisture 

Rubber  Sheet  Stock,  Thiokol  Sheet,  Hycar,  Butyl, 
Neoprene 


1%  Hydrocarbon  Wax  @  120°C 
Multi wax  D-445 
Wax  B 

Socony  Vac.  Co.  PD-893-J 
Wax  CV-100 


Dallas  Wax  #71 
M&M  Wax  3238 
Macro! ia 
Carnauba 


Cardboard  (Waxed  &  Unwaxed) 
Nebraska  Cardboard 
Nebraska  Paper 
Iowa  Paper 
Illinois  Paper 


Dyes 

Red-CWS,  Cal co,  DuPont  Rhodarqine  &  Extra,  CWS  Green,  Violet, 
DuPont  Oranges,  Yellow  @  '100°C 

Ammonium  Pi  crate  @  120°C 

Picric  Acid  or  Tetryl  <100°C 

Zinc  Oxide  @  100°C 
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BARATOL 


(60Ba(N03)2/40TNT) 


Incompatible 

Dyes  -  Oil  Blue,  Oil  Yellow,  CWS  Yellow,  Oil  Scarlet  371  (moderate) 
Compatibl e 

Methyl  amino  Anthraquinone 
NaCl  dye 


Adhesive  -  DuPont  Adiprene  100  (cured) 


BLACK  POWDER 


"Combustible  materials  which  have  absorbed  liquors  leached  from  BP 
constitute  a  fire  hazard  &  may  become  explosive"  -  e.g.  lumber  must 
not  be  released  for  reuse. 

Incompatible 

Very  Heavy  Corrosion  -  Copper 

Bronze 

Brass 

Nickel 

Steel,  Copper  Plated 


Compatible 

TNT 

Tetryl 

Lead  Chromate  Powder  (w/black  pdr.  Grade  A) 
Barium  Chromate  Powder  (w/black  pdr.  Grade  A) 
Primer  Compound  PA100 
Lead  Azide  (w/black  pdr.  Grade  A) 

Relay  Powder  Spec.  AXS-1277 
Non  Gaseous  Delay  Powder 
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EXPLOSIVE  D 


Incompatible 


Tetryl  or  Haleite 

Lead  (Lead  Picrate)  -  note  sprinklers  w/fusible 
Picric  Acid 

Metals  -  When  Wet  (moderate) 

@100°C  Nitrocellulose  only  recommended  for  use  in  pro- 

Nitrocellulose  &  Nitroglycerine  pellants  for  exper,  purposes  (@90°C) 


Compatible 


Water 

Steel 

Black  Powder 

Most  Dyes  &  Coating  Materials 
Metals  -  When  Dry 
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HALEITE 


Incompatible 

Brass  &  Moisture 
Cadmium  &  Moisture 
Copper  &  Moisture 
Nickel  &  Moisture 
Mild  Steel  &  Moisture 
Zinc  &  Moisture 


Compatible 

Dry  Haleite  Will  Not  React  with  Most  Metals 
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BIT 


HBX 


Incompatibl e 

Moisture  Causes  Gas  Buildup  &  Casing  Rupture  (Aluminum  -  water 
reaction  producing  H 2) 
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Incom patibl e  (at  120°C) 

HMX  A-222  w/MMML-1 075  (oil) 
w/MMMFC-176  (oil) 
HMX-312  w/ Pol y-EM500  (binder) 
w/ Poly- EMI 3  (binder) 
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LEAD  AZIDE 


Incompatible 

Copper  &  Moisture  -  reacts  to  form  copper  azide  (increased  sensitivity) 
Zinc  -  corrodes  w/moisture  rapidly 
Alloys  of  Copper  or  Zinc 

Decomposes  Under  UV  Light  (note  fire  detectors) 


Compatible 


Water  -  To  Certain  Extent  That  It  Doesn't  Form  Larger  Crystals 
(For  longer  storage  under  water  it  is  dextrinated) 

A7970  Cement 
"GILSABIND" 

Solvent  Cement  by  Cabot 
Cleaner  by  Cabot 

No  evidence  of  reaction  between  xiry  lead  azide  and  most  metals. 


NITROCELLULOSE 


Incompatible 


Solvent  Wet  w/Chl orosul fonic  Acid 
01  eum 

Active  Metals 

Powerful  Oxidizing  Material s 

Hydrides 

Phosphide 

Carbides 

Di ethyl enetriamine-Trinitrate  (Excessive  Reaction). 
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PBX-N 


PBX9404  Incompatible 


Explosive  -  Nitroquan 
Mi  seel  -  Glycerol 
Mi  seel  -  Defoamer  Dow  Froth  250 
Mi  seel  -  Urea  Regin 


Rigid  Foam  -  Down  Corn  9-30030 

Rigid  Foam  -  X- 3- 0030 

Rigid  Foam  -  Upjohn  CPR-302-2 


Flex  Foam  -  ABC-31 -2 
Flex  Foam  -  CPR2030 
Flex  Foam  -  CPR-X-2  141A-27 
Flex  Foam  -  CPRX-2  141A-34 
Flex  Foam  -  ABC-30-1 


Flex  Foam  -  ABC-31 -1 


Adhesive  -  Dow  Corn  A-4000 

Adhesive  -  Furane 

Adhesive  -  Aerobond  H7-Part-A 

Adhesive  -  Aerobond  H7-Part-A 

Adhesive  -  Epoxy  633111 

Adhesive  -  Atlas  Minepoxy  Bond 

Adhesive  -  Thixon  XAB-772 

Adhesive  -  Dow  Corn  RTV-732  (uncured) 

Adhesive  -  Loctite  307 

Adhesive  -  Loctite  308 

Adhesive  -  Loctite  310 

Adhesive  -  Loctite  311 

Adhesive  -  BiPax  Tra-Duct 

Adhesive  -  422-95 

Pot  Comp  -  Dow  Corn  RTV  502 

Pot  Comp  -  Dow  Corn  S-140 

Pot  Compt  -  Mansville  Duxseal 

Crack  Detector  -  Pruss  Blue 
Crack  Detector  -  Food  Color 


Oil  -  Gen  Elec  Verslube  6-300 
Oil  -  Wesson  Salad 
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Metal 

Load 

- 

Blackbird 

3126 

Metal 

Load 

- 

Blackbird 

3145-1 

Metal 

Load 

- 

Bendix  Blackbird 

#1 

Metal 

Load 

- 

Bendix  Blackbird 

#2 

Metal 

Load 

- 

Bendix  Blackbird 

#2  -A 

Metal 

Load 

- 

Blackbird 

2-3147 

Metal 

Load 

- 

Blackbird 

1  -31 51 

Metal 

Load 

- 

102-1236A 

Metal 

Load 

- 

Blackbird 

102-1236A 

Metal 

Load 

- 

Gen.  Tire 

Ethane 

Metal 

-  Cobalt 

PBX9407  (No  Carbon) 

Explosive  -  PETN  Lot  B-1084 


PBX9407  (Burlington) 

Adhesive  DuPont  Adiprene  Blue 
Adhesive  DuPont  Adiprene  Green 


PBX9407  (A-142) 

Adhesive  -  MMM  #465 

Eastman  910 
DuPont  Adiprene 


PBX9007  (A-014) 

Adhesive  -  Bakelite  Resin 

Palmer  Cement  752  Batch  926 
MMM  4-9146 

Rigid  Foam  -  Nopco  Foam  H-102 


PBX9010  (A-099) 

Metal  Load  -  Gen.  Tire  Genthane 
(K-099)  Adhesive  -  Atlas  Min-Epoxy  Bond 
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PBX9404 


Compatibl  e 

Metal  -  Platinum 

Adhesive  -  DuPont  Adiprene 

Crack  Detector  -  F.D.-C  Color  #2  Red 
Crack  Detector  -  F.D.-C  Color  #3  Green 
Crack  Detector  -  Maqna  Flux  Zyglo  ZE-3 

Crack  Detector  -  Magna  Flux  Zyglo  ZE-6 

Crack  Detector  -  Magna  Flux  Zyglo  ZL-1C 

Crack  Detector  -  Magna  Flux  Zyglo  ZL-4B 

Crack  Detector  -  Magna  Flux  Zyglo  ZL-17A 

Crack  Detector  -  Magna  Flux  Zyglo  ZL-18A 

Crack  Detector  -  Magna  Flux  Zyglo  ZL-22 

Crack  Detector  -  Magna  Flux  Zyglo  ZL-30A 

Rigid  Foam  -  Polyurethane  Sta  Foam 
Rigid  Foam  -  Bendix  K1 01 3-1 049 
Rigid  Foam  -  Bendix  p683-718 
Rigid  Foam  -  Bendix  Part  1436038 
Rigid  Foam  -  Bendix  Part  194573 
Rigid  Foam  -  Bendix  Part  99232 
Rigid  Foam  -  Upjohn  Cpr  -  301 -3C 

Rubber  -  Dow  Corn  5-5420 

Mi  sc  -  Emralon 
Silicate 

Oil  -  Lub.  Oil 

Dow  Corn  Comp-4 

Pot  Comp  -  Dow  Corn  RTV521 
Dow  Corn  Q90092 
Dow  Corn  X9-0112 
Dow  Corn  092009/29 
Gen  Elec  RTV-6C-3243 
Dow  Corn  S-140  Lot  230223 
Dow  Corn  RTV-630 

Struct.  Pla.  -  Gen  Elec  Lustran  1-710 
Phenoxy  8060 
Gen  Elec  Lexan  134 
Mo bay  Merlon  M-50 
Gen  Elec  Lexan  104 
Mo bay  Merlon  60 
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Metal  Load  -  KW  1920  SPL3242-A 
KW  1920  SPL3242-D 
Rattan  B 

Metal  -  Platinum 
Lead 
Silver 

B-and-A  Nickel  Code-2011 
LRL  Alloy  D-38  Batch  8272 


Adhesive  -  DuPont  Adiprene  L-100  &  L-167 
Dow  Corn  A-4000 
Laminae  4116 
Dow  Corn  S-140 
S-731 
S-891 
MMM  Tape  -  60 
MMM  Mylar  -  56 
Laminae 

Binder  -  Hypalon  310140-1 

Union  Carbide  4-3602 
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PBX9007 


Compatibl e 

Adhesive  -  DuPont  Adiprene  Yellow 

Struc.  Pi  a.  -  Phenoxy  8060 

Gen  Elec  Lexan  134 
Mobay  Merlon  M-50 
MMM  #465 


PBX9407 

Compatibl  e 

Struc.  PI  a  -  Phenoxy  860 

Gen  Elec  Lexan  134 
Mobay  Merlon  M-50 

Adhesive  -  MMM  #466 

MMM  #Y-9146 
Sprayon  Stick  Quick 
DuPont  Adiprene  L-100 
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PENTOLITE 


Incompatibl  e 

May  Have  Tendency  to  Separate  Into  Its  Ingredients. . .PETN  &  TNT  Under 
High  Temperatures. 


Compatibl  e 

Has  No  Reaction  with  Most  Metals 
(Highly  Compatible  When  Dry) 
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PETN 


Adhesive  -  (SHJELDAHL  G-100  &  G-107) 

(MMM  SCOTCH  465) 

(MMM  &-9146) 

(H-Film) 

(MMM  Y-3736) 

(POLYKEN  XO-1-3) 

(POLYKEN  XO-1-2) 

(POLYKEN  XO-1-5) 

(POLYKEN  TO-1-1) 

(MMM  Tape  466) 

(MMM  Tape  465) 

(Phenolic  Adhesive  on  Regal  Mylar  A-l ) 

(DuPont  Adiprene  L-100) 

( PER-331 ) 

(P01B-1 01 ) 

(HA1-B-101 ) 

(Bet.  Finish  Liquid  Envel .  33-20) 

(Bet.  Finish  Liquid  Envel.  33-3267) 

(DuPont  Adiprene  -  yellow,  amber,  blue,  green) 
(Bakelite  Resin) 

(NA1B) 

( Lexham) 

(Cerambound  503-cured  &  uncured) 


Flex  Foam  (CPR-2054) 

(LRL  Comp  14) 

( XB-42-8A) 

( CPRX2-1 41  A) 

(LRL  Comp  22) 
(MMM  Scotch  221 ) 


Plastic  (Mesa  Epiall)  1914 
(Mesa  Epiall)  1906 

(dehp) 


Rigid  Foam  (Dow  Corn.  Q30030) 

Miscellaneous  -  (Foote-Chem  Eucryptite) 
(Foote-Chem  Zerifal) 

( Polyethyl ene  Black  Bag) 

*Explosive  -  (PBX9407) 

(PBX9407  no  carbon) 

Structural  -  DAP-(Blue) 

Pot  Comp.  (Manville  Duxseal ) 


Metal  -  Nickel 
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Compatibl e 


Structural  -  DAP-(Green) 
Polysulfone 

Structural  PI  a:  P-1700  C-30-C 
Crac  Detec:  Pigment 
Dry  PETN  &  Metals 
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PICRATOL 


(Explo.  D/TNT)  (52/48) 


Incompatible 

Lead  -(Due  to  Explo.  D) 

Silastic  (Dow  Corning  #732  uncured) 


Observe  All  Precautions  Made  Necessary  By  The  Characteristics  of 
TNT  &  Ammonium  Picrate 
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Incompatible 


Asphalt  Compounds 

Compatibl e 

A1  urn  in  urn 
Stainless  Steel 


lit  RESEARCH  INSTITUTE 


NITROGUANIDINE 


Incompatibl  e 

Wet  w/ Ac ids 
Water  Unsat.  Aldehyde 
An hydride 
Lactone 
Acryl ic 
Active  Metals 
Hydrides 
Acyl  Halide 
Carbide  Allyls 
Chlorohydrin 

Unsat.  Ketones,  Powerful  Oxidizers,  Phosphide,  Polymerization  Catalyst, 
Carbide,  Ally!  Cpds.,  Vinyl  Acetate,  Sensitive  to  Water. 


Compatible 
RDX  0-1 2 
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COMP  B 


Incompati bl e 

Hard  Unique  Liner 
Soft  Unique  Liner 
Essex  Liner 

TNT  &  Asphalt  Compounds 

(mainly  decomposition  &  quality  control) 


RED  PHOSPHORUS 


Incompati bl e 

Oxidizing  Agents  (Forms  Very  Sensitive  Mixtures) 


TETRYL 


Incompati bl  e 


American  Seal  'Locktite' 


TETRYTOL  (Tetryl/TNT) 

Incompatible  (Minor  i.e.  corrosion  incomp.) 

Dry  Slightly  Corrodes  Magnesium  &  A1  Alloys 
Wet  Copper 
Brass 
A1 urn in urn 

Magnesium  -  Aluminum  Alloys 
Mild  Steel 

Mild  Steel  Plated  w/ Cadmium 
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TNT 


Incompatibl e 

Chlorosul fonic  Acid 
Acid,  Oleum 
Active  Metal 

Oxidizing  Material ,  Powerful 
Acetone  or  Acetonitrite  Solutions  w/Amines 
(forms  hypergallic  reactions) 

Cavity  Liners  at  High  Temperatures 

Alkalies  and  Ammonias 

Hard  Unique  Liner 

Tuffseal  Liner 

TS1  Liner 

Plastonium  Liner 

Asphalt  Compounds  (decomposition) 

Cardboard  Fibers,  KN03>  Activated  Carbon  (lowers  temp,  for  runaway) 


Compatibl  e 
MISCH-MET  #4 
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TRITONAL 


(TNT/ALUM)  (80/20) 


Incompatible 
Alkalies  and  Ammonias 

Moisture  (Aluminum  -  Water  Reaction  Produces  H2  Gas  &  Could 
Result  in  Pressure  Rupture) 


WHITE  PHOSPHORUS 


Incompatible 

Oxygen  (air) 

Polymerization  Catalyst 

Oxidizing  Materials  -  Mild  &  Powerful 

A1 kal i 

Active  Metal 


DBX 

(aluminized) 

Incompatible 

Copper  and  Brass  ("like  Amatol") 

Reacts  with  Metals  in  Same  Manner  as  Amatol 
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DOUBLE  BASE  PROPELLANT  (HEN-12) 


Incompatible 


643  Entries  in  Bacchus  Compatibility  File 

Note  HEN-12  is  an  extremely  sensitive  and  reactive  double-base  solventless 
propellant,  which  is  used  as  a  worst-case  by  Hercules.  In  general,  if 
a  sample  substance  is  compatible  with  HEN-12,  it  is  compatible  with  any 
conventional  NC  base  propellant. 
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APPENDIX  C 


RUNAWAY  REACTION  IN  LIQUID  EXPLOSIVE  HOLDING  VESSELS 


Runaway  Reaction  in  Liquid  Explosive  Holding  Vessels 


Physical  Aspects 

By  far  the  most  dominant  scenarios  shown  to  be  hazardous  from  the  fault 
tree  analysis  of  the  Washout/Steamout  Building  North  Tower  and  the  Refining 
Building  involved  runaway  reactions  in  holding  vessels,  such  as  the  melt  kettles 
and  the  separator  vessel  in  the  North  Tower.  In  each  case,  several  incidents 
per  year  were  computed.  Since  this  is  largely  an  indication  of  the  scarcity  of 
information  available  on  which  to  make  a  truly  objective  analysis,  it  is  sug¬ 
gested  that  testing  be  conducted  in  order  to  more  realistically  assess  this 
problem.  In  this  section,  the  method  of  analysis  used  for  evaluating  runaway 
reaction  is  presented  along  with  the  available  data  and  conclusions  based  on  the 
analyses. 

The  Ba telle  Report,  Volume  IV  (reference  Cl),  contains  several  excellent 
"runaway  reaction"  articles  describing  the  experimental  and  analytical  methods, 
the  state  of  the  knowledge,  and  what  it  all  means  relevant  to  WADF.  These 
articles  include  the  following: 

1)  Peterson,  R. ,  L.  R.  Rothstein,  and  J.  H.  Smith,  "Thermochemistry 
and  the  Demilitarization  of  Explosives",  NWSY  TR  76-2,  July  1976. 

2)  Letter  to  Dr.  L.  Rothstein  from  T.  B.  Joyner,  dated  17  December 
1975. 

In  addition,  a  1970  article  by  Groothuizer,  Lindeijer,  and  Pasman  in 
Explosi vestoffe  5  (1970)  97  was  referenced  by  Peterson  et  al  and  proved  to  be 
quite  informative. 

The  classical  theory  of  thermal  explosion  is  summarized  in  the  Peterson 
paper  and  will  not  be  repeated  here.  Two  relations  characterize  the  runaway 
reaction  phenomena.  The  critical  temperature,  Tc>  (below  which  conductive  heat 
transfer  is  adequate  to  remove  heat  produced  inside  the  body  of  explosive  by 
exothermic  reaction)  is  given  by 


Rln  pa2QZE 
XRTC2* 
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where  Tc  =  boundary  temperature  at  critical  condition  (°k) 
p  =  density  (g/cc) 

X  =  thermal  conductivity  (cal/cm°k  sec) 

Q  =  heat  of  reaction  per  unit  mass  (cal/g) 

Z  =  pre-exponential  factor  (sec-1) 

E  =  activation  energy  (cal/mole) 

R  =  gas  constant  (1.987  cal/mole°k) 
a  =  significant  dimension  (cm) 

-  slab  half  thickness 

-  radius  of  cylinder 

-  radius  of  sphere 

6  =  shape  factor 

-  0.88  for  slabs 

-  2.00  for  cylinders 

-  3.32  for  spheres 

The  time  to  explosion,  tg,  is  given  by 


where 


te  = 


CRTo2  (_E_) 
exP  ^RTo; 


QZE 


C  =  specific  heat  (cal/g°k) 

T  =  boundary  temperature  (°k) 

0 


It  must  be  remembered  that  equation  Cl  is  derived  based  on  conduction  being 
the  dominant  mode  of  heat  transfer.  Therefore,  results  correspond  more  closely 
to  the  non-agitated  condition  in  liquid  explosive  holding  vessels.  Equation  C2 
assumes  no  heat  transfer  -  i.e.  views  a  region  deep  within  the  bulk  of  material 
where  temperature  gradients  are  gradual.  In  these  respects,  the  thermal  explo¬ 
sion  model  will  be  conservative. 

Mixing  also  serves  to  blend  in  local  high  temperature  regions  that  might 
develop  if  a  contaminant  enters  the  vessel.  In  this  case,  mixing  is  critical 
to  prevent  runaway  reaction.  The  thermal  explosion  model  does  not  account  for 
localized  reactions  from  such  a  contaminant.  It  assumes  everything  is  homo¬ 
geneous,  and,  therefore,  may  not  be  conservative  with  regard  to  local  reactions. 
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In  spite  of  the  model's  simple  view  of  the  melt  kettle  as  containing  a  homo 
geneous  pure  chemical  mixture  in  a  simple  configuration  such  as  a  cylinder,  the 
model  will  be  used  to  help  map  out  conditions  where  problems  may  be  present. 

The  model  provides  the  critical  temperature  and  time  to  explosion  for  a  pure 
chemical  mixture  as  long  as  the  parameters  Q,  Z  and  E  are  known  for  that  mixture 
These  parameters  have  been  derived  for  pure  explosives  and  are  presented  in  the 
paper  by  Peterson,  et  al  for  several  materials.  As  was  emphasized  in  that 
paper  as  well  as  in  many  others,  the  values  for  pure  explosives  are  not  rele¬ 
vant  for  aged  or  contaminated  explosive  materials.  You  essentially  have  a 
new  chemical,  and  if  the  contaminant  or  decomposition  products  are  uniformly 
mixed  into  the  explosive  a  new  set  of  parameter  values  (Q,  Z  and  E)  should 
realistically  describe  the  susceptibility  of  the  new  mixture  to  runaway  reaction 
Naturally,  if  the  mixture  is  not  uniform,  local  effects  may  dominate.  However, 
in  order  to  help  map  out  the  potential  runaway  reaction  hazards,  the  assumption 
was  made  that  the  thermal  explosion  model  can  be  used  for  aged  or  contaminated 
materials;  you  just  need  to  determine  the  pertinent  values  of  Q,  Z  and  E. 

In  essence,  these  are  used  as  scaling  parameters. 

The  thermal  explosion  model  was  used  to  compute  the  critical  temperature 
and  time  to  explosion  versus  temperature  for  selected  cases  extracted  from  the 
literature  (see  Figure  Cl).  TNT  based  materials  were  considered  because  at  the 
relatively  low  temperatures  to  be  experienced  in  the  holding  vessels,  even 
under  the  worst  conditions  (126°C),  TNT  will  be  the  liquid  phase  and  should 
dominate.  The  liquid  in  the  vessel  can  be  viewed  as  TNT  "contaminated"  by 
other  materials  present.*  Curves  4  and  5  at  the  far  right  of  Figure  Cl  show 
time  to  explosion  t  versus  temperature  for  pure  TNT.  These  curves  were  based 
on  activation  energies  and  pre-exponential  factors  presented  in  references  C2 
and  C3. 

For  pure  TNT,  the  times  to  explosion  are  fairly  long  (at  least  10  hours 
at  130°C)  in  even  the  worst  case  shown.  The  explosives  to  be  melted  out  of 
items  at  WADF  will  not  be  pure  explosive.  They  will  be  aged  and  are  likely 
to  be  contaminated.  Therefore,  the  pure  TNT  curve  represents  an  ideal  that 
will  not  be  realized.  Joyner  in  reference  C3  presented  values  of  apparent 
activation  energy  and  pre-exponential  factor  for  a  TNT-asphalt  mixture.  The 
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*This  may  not  always  be  true.  Indications  are  that  the  more  reactive  phase 
(e.g.  RDX  in  TNT)  can  dominate .  Therefore,  curves  based  on  TNT  alone  may 
not  be  reliable. 


C3 


TIME  TO  EXPLOSION,  t  (hours) 


0  0.2  0.4  0.6  0.8  1.0  1.2  1.4  1.6  1.8° 

T(°c) 

INVERSE  SAFETY  FACTOR  =  1±-u — 


FIGURE  C2  Subjective  Distribution  To  Account 
For  Uncertainty  In  T  Value 


corresponding  t  -T  relation  is  labeled  in  Figure  Cl  as  curve  6,  This  curve 
has  been  adopted  in  the  present  analysis  as  representing  a  typical  explosive 
to  be  handled  at  WADF,  It  should  be  noted  that  many  items  to  be  steamed  out 
or  melted  out  at  WADF  have  asphalt  liners. 

The  fan  shaped  region  at  point  1  of  Figure  Cl  is  an  attempt  to  define  a 
"worst  case  contaminant"  envelope.  The  point  labeled  1  is  a  single  data  point 
obtained  from  tests  conducted  in  Holland  (reference  C4)  to  investigate  an 
explosion  in  the  KNSF  melt  shop  (Mui'den,  Holland)  June,  1966,  In  that  test 
TNT  was  contaminated  with  activated  charcoal  and  an  explosion  occurred  at  135°C 
in  15  minutes.  The  shaded  (fan  shaped)  region  was  obtained  by  assuming  a  wide 
range  of  pre-exponential  factors  1  (from  107  sec-n  to  1020  sec-1)  and  solving 
for  the  activation  energy  required  to  produce  an  explosion  in  15  minutes  at 
135°C.  The  centered  curve  corresponds  to  the  value  of  Z  used  for  pure  TNT 
in  the  Yorktown  paper  (reference  C2),  This  curve  has  been  chosen  to  represent 
a  worst  case  contaminant  in  our  analysis.  The  shaded  region  should  conservatively 
represent  the  uncertainty  in  the  relation  for  the  Dutch  activated  charcoal -TNT 
test.  It  should  be  noted  that  in  the  reference  C4  (Dutch  Experiments),  card¬ 
board  and  glass  wool  also  signfficantly  decreased  the  time  to  explosion. 

It  was  hypothesized  that  such  materials  inhibit  heat  transfer  locally  allowing 
hot  spots  to  form.  Point  2  in  Figure  1  is  another  data  point  from  the  Dutch 
test  series,  in  which  a  mixture  of  TNT  with  0.5  percent  propellant,  0.5  percent 
soap,  0.5  percent  cardboard,  0.5  percent  iron,  2  percent  ammonium  nitrate  and 
a  trace  of  KC7  exploded  at  135°C  in  5  hours. 

Point  3  on  Figure  Cl  corresponds  to  a  test  conducted  at  NAVWPNSTA  Yorktown 
(reference  C2)  in  which  a  MK25  Mod  1  HBX-1  loaded  mine  was  exposed  to  15  psig 
steam  in  an  autoclave  for  several  hours.  No  explosion  occurred,  but  bubbling/ 
gassing  was  observed  at  81/2  hours  and  resulted  in  shutdown  by  I2V2  hours. 

Similar  bubbling  has  been  noted  to  be  a  precursor  to  explosion  in  other  tests  or 
incidents. 

Other  data  is  available  to  be  plotted  on  a  map  such  as  Figure  Cl,  but  the 
data  shown  indicates  that  pure  TNT  represents  an  overly  optimistic  limit, 
curve  6  (TNT-asphalt)  is  not  unreasonable  to  characterize  a  typical,  hopefully 
conservative,  mixture  for  WADF,  and  the  middle  curve  associated  with  data 
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point  1  (TNT-activated  charcoal)  is  probably  a  reasonable  "worst  case"  for  con¬ 
taminated  explosive.  To  better  evaluate  this  problem,  it  is  strongly  suggested 
that  more  comprehensive  testing  be  conducted  to  determine  the  effect  of  other 
"real  world"  contaminants  on  all  the  explosives  to  be  processed  at  Hawthorne. 
Such  testing  should  be  of  the  type  conducted  by  Joyner  (reference  2,  parts  1-7) 
to  evaluate  the  pertinent  reaction  rate  constants,  and/or  of  the  type  conducted 
by  the  Dutch  to  evaluate  the  melt  shop  incident  (reference  3). 

Probablistic  Aspects 

To  estimate  the  probability  of  a  runaway  reaction  occurring,  the  following 
factors  were  considered: 

1)  the  probability  that  the  mixture  temperature  exceeds 
the  critical  temperature  for  runaway  reaction,  P(T^Tc) 

2)  the  probability  that  the  hold  time  exceeds  the  time  to 
explosion  at  the  exposure  temperature,  P(t*tg)* 

The  overall  probability  that  a  runaway  reaction  occurs  in  the  vessel  is 
taken  to  be  the  product  of  these  two  values. 

Consider  first  the  probability  that  the  critical  temperature  will  be 
exceeded  (T^TC).  Two  operating  temperatures  are  of  concern  in  the  WADF  system. 
These  are  the  normal  operating  temperature  of  up  to  119°C  (15  psig  steam),  and 
the  maximum  credible  temperature  limited  by  the  rupture  disk  pressure  rating, 
126°C  (22  psig).  Six  configurations  are  of  interest: 

Pure  TNT  (overly  optimistic) 

-  in  vessel 

-  in  drain  line 

Normal  (aged)  material  at  WADF 

-  in  vessel 

-  in  drain  line 
Severely  Contaminated  Explosive 

-  in  vessel 

-  in  drain  line 

From  Figure  Cl,  curves  4,  6,  and  1  are  used  to  represent  the  ideal  pure 
explosive,  a  typical  WADF  material ,  and  a  severely  contaminated  explosive,  res¬ 
pectively.  Because  there  is  considerable  uncertainty  that  these  curves  are 
realistic  for  WADF,  a  subjective  probability  distribution  has  been  developed 

*t  is  the  hold  time 
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(Figure  C2).  This  curve  is  subjective  and  is  used  to  avoid  making  "Go-No-Go" 
type  decisions  which  would  be  inappropriate  in  this  case.  Based  on  Figure  Cl  and 
C2,  the  probability  of  T^Tc  can  be  derived  for  each  case  considered. 

Case  P(119°C^Tc)  P(126°C*Tc) 


Pure  TNT  (overly  optimistic) 
in  vessel  (Tc=106°C) 

0.9999 

1.0 

in  drain  line  (Tc=164°C) 

0.17 

0.34 

Normal  Material  at  WADF 
in  vessel  (Tc=77°C) 

1.0 

1.0 

in  drain  line  (Tc=130°C) 

0.89 

0.973 

Severely  Contaminated  Explosive 
in  vessel  (Tc=60°C) 

1.0 

1.0 

in  drain  line  (T  =100°C) 

0.9995 

1.0 

As  can  be  seen,  the  subjectivity  of  FigureC2  really  makes  little  difference. 
For  all  practical  purposes,  the  critical  temperature  will  be  exceeded  in  all 
cases  of  interest.  Even  0.17  is  a  relatively  high  probability. 

For  the  operating  temperatures  being  considered,  the  time  to  explosion  can 
be  read  off  of  Figure  Cl. 

Pure  TNT  Typical  WADF  Material  Severe  Contaminant 
119°C  (normal)  tg  =  190  hr. (8  days)  tg  =  6.7  hr.  tQ  =  1.2  hr. 

126°C  (maximum)  t  =  90  hr.  (4  days)  t  =  3.5  hr.  t  =  36  min. 

e  e  e  (0.6  hr.) 

The  probability  that  the  hold  time  exceeds  the  time  to  explosion,  P(t^tg), 
was  derived  for  each  case  by  considering  the  operating  schedule. 

For  the  separator  in  the  North  Tower,  it  was  assumed  that  normal  ’operation 
involves  2  hour  holds  with  a  standard  deviation  of  \  hour.  This  is  based  on 
all  8  tilt  tables  being  used  to  fill  the  separator  to  the  180  gallon  level 
prior  to  beginning  to  fill  melt  kettles.  Figure  C3  shows  the  cumulative  proba¬ 
bility  distribution  for  this  case. 

For  abnormally  long  holds  in  the  separator  (i.e.  due  to  equipment  problems 
downstream),  it  was  assumed  that  a  typical  prolonged  hold  involved  an  addi¬ 
tional  2  hours  (total  hold  of  4  hours)  and  that  it  is  quite  unlikely  that  a 
hold  will  occur  beyond  one  shift  (say  a  probability  of  0„05  that  this  will 
occur) o  The  resultant  probability  distribution  is  shown  in  Figure  C4. 
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FIGURE  C3  Probability  of  Hold  Time  Being  Greater  Than 
Time  to  Explosion  (Separator  -  Normal  Hold  Times) 
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TOO 


te(hr) 

FIGURE  C4  Probability  of  Hold  Time  Being  Greater  Than 
The  Tine  To  Explosion  (Separator  -  Abnormal  Holds) 


Similar  rationales  were  used  to  develop  Figures  G5  and  C6  for  the  melt  kettles. 
From  Figures  C3  through  C6,  the  probability  of  the  hold  time  exceeding  the  time 
to  explosion  can  be  derived.  The  probabilities  of  runaway  reactions  occurring 
are  sunmarized  in  Table  Cl.  From  Table  Cl  it  is  seen  that  pure  TNT  would  never 
be  expected  to  be  involved  in  a  runaway  reaction;  severely  contaminated  explosive 
would  always  be  expected  to  runaway;  and  the  materials  "expected  for  WADF"  fall  in 
between.  For  these  cases,  normal  operating  times  and  temperatures  have  low 
probabilities  of  runaway.  Abnormally  long  holds  in  some  cases  drive  the 
probability  up  toward  unity,  particularly  when  combined  with  excessive  operating 

temperatures. 

It  must  be  remembered  that  this  analysis  is  considered  to  be  conservative. 

The  effects  of  agitation  were  not  considered.  Agitation  should  enhance  heat  transfer 
and  reduce  the  chance  for  local  heat  buildup,  particularly  due  to  contamination. 

The  probabilities  shown  in  Table  1  were  used  in  the  fault  tree  analysis,  and 
consequently  runaway  reaction  was  determined  to  be  the  major  problem  from  that 
analysis.  IITRI  personnel  feel  that  such  a  conservative  analysis  must  be  used 
because  of  the  inadequate  information  that  currently  exists  concerning  the  sus¬ 
ceptibility  to  runaway  reaction  of  chemical  mixtures  that  are  aged  and  likely 
to  be  contaminated  such  as  will  exist  at  WADF.  Therefore,  further  testing  to 
better  understand  this  hazard  is  quite  important. 

If  a  runaway  reaction  does  occur  in  a  holding  vessel  at  WADF,  the  existing 
protective  measure  may  prove  to  be  inadequate.  A  "top  surface"  relatively  gentle 
deluge  probably  will  cause  a  crust  to  form  and  protect  the  reaction  beneath  the 
crust  from  further  cooling  effects.  Apparently,  a  more  forceful  deluge  is 
undesireable  because  of  resultant  gas  generation.  The  equipment  in  place 
cannot  be  modified  easily  to  accomodate  a  fast  dump  to  pans,  although  a  slow 
dump  may  help  in  some  cases.  At  the  present  time  there  do  not  appear  to  be  any 

simple  solutions. 

Of  special  concern  are  the  long  drain  lines  at  the  bottom  of  these  vessels. 
These  pipes  will  contain  stagnant  explosive,  unaided  by  agitation  in  the  vessels. 
Therefore,  in  these  cases,  the  initiation  probabilities  estimated  above  may 
not  be  overly  conservative.  The  initiation  probability  for  material  expected 
to  be  handled  at  WADF  was  calculated  to'  be  0.11  in  the  melt  kettle  drain  at 
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FIGURE  C5  Probability  of  Hold  Time  Being  Greater  Than 
Time  To  Explosion  (Melt  Kettle  Normal  Hold) 
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FIGURE  C6  Probability  of  Hold  Time  Being  Greater  Than 
Time  To  Explosion  (Melt  Kettle  -  Abnormal  Hold) 
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normal  operating  temperature  with  a  long  hold.  It  was  estimated  to  be  0.74 
with  high  temperature  steam  in  combination  with  a  long  hold.  This  section  of 
pipe  is  not  steam  jacketed  so  the  wall  temperatures  will  be  somewhat  lower 
than  those  conservatively  assumed  in  this  analysis.  However,  this  conserva¬ 
tism  is  considered  to  be  justified.  Therefore,  it  is  suggested  that  the  valves 
be  moved  as  close  to  the  vessel  exit  as  possible  to  minimize  the  stagnant  space 
present  in  the  drains. 

In  summary,  a  number  of  problems  prohibit  accurate  and  reliable  quanti¬ 
fication  of  the  potential  for  runaway  reaction  in  liquid  explosive  holding 
vessels.  These  include  the  following.: 

•  theoretical  models  assume  homogeneous  chemical  mixtures, 
whereas  local  effects  may  dominate  in  actual  runaway 
reactions,  particularly  those  induced  by  contaminants 

•  theoretical  models  do  not  consider  convection  heat  transfer, 
whereas  some  degree  of  agitation  will  be  present  in  the 
holding  vessel s 

•  available  experimental  data  is  primarily  for  pure  explosives, 
whereas  the  materials  to  be  processed  at  WADF  are  likely 

to  be  aged  and  contaminated. 

Available  data  with  contaminated  explosives  or  materials  exposed  to  melt-remelt 
cycles  indicates  that  the  susceptibility  to  thermal  explosion  can  be  increased 
significantly. 

Data  of  this  type  is  insufficient  to  reliably  quantify  the  hazard.  Although 
similar  operations  have  been  conducted  in  the  past,  some  incidents  of  a  similar 
nature  to  that  evaluated  here  have  been  reported  (e.g.  see  Appendix  E  — 
melt-pour  operations,  DDESB  File  numbers  433,  235,  518,  and  989).  Thus,  IITRI 
personnel  feel  that  sufficient  unknowns  exist  to  demand  a  conservative  approach 
with  regard  to  safety.  It  is  strongly  recommended  that  further  simulation  testing 
such  as  that  done  in  Holland  (reference  C4)  and/or  at  China  Lake  (e.g.  reference 
C3)  be  conducted  to  better  characterize  the  potential  for  runaway  of  materials 
likely  to  be  processed  at  WADF.  Such  testing  should  be  accomplished  before 
WADF  goes  operational . 
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TABLE  Cl  PROBABILITY  ESTIMATES  FOR  RUNAWAY  REACTION 


Temperature 

Material  Type/Configuration  Exposure 


Pure  TNT 

in  Vessel  119°C 


126°C 


in  Drain  119°C 


126°C 


Expected  WADF  Material 

in  Vessel  119°C 


126°C 


in  Drain  119°C 


126°C 


Severely  Contaminated 
Material 

in  Vessel  119°C 


126°C 


Cl  5 


Overall 


p(T>,y 

Hold* 

Case 

P(t*te) 

Runaway 

Probability 

0.9999 

SN 

_  1 4 

<10 

'vO 

SA 

II 

0 

MN 

II 

0 

MA 

II 

0 

1.0 

SN 

-14 

<10 

'vO 

SA 

11 

0 

MN 

II 

0 

MA 

II 

0 

0.17 

SN 

_14 

<10 

<\<0 

SA 

II 

0 

MN 

II 

0 

MA 

II 

0 

0.34 

SN 

<10 

'vO 

SA 

II 

0 

MN 

II 

0 

MA 

II 

0 

1.0 

SN 

_14 

<10 

0 

SA 

0.09 

0.09 

MN 

^  0 

0 

MA 

0.12 

0.12 

1.0 

SN 

1 . 3X1 0~ 3 

CO 

O 

X 

00 

• 

SA 

0.6 

0.6 

MN 

0.02 

0.02 

MA 

0.76 

0.76 

0.89 

SN 

<10" 

0 

SA 

0.09 

0.053 

MN 

^  0 

0 

MA 

0,12 

0.11 

3 

0.973 

SN 

1.3X10" 

1 .27X10" 

SA 

0.6 

0.058 

MN 

0.2 

.019 

MA 

0.76 

0.74 

1„0 

SN 

0.95 

0.95 

SA 

0.92 

0.92 

MN 

1.0 

1.0 

MA 

1.0 

1.0 

1.0 

SN 

0.998 

0.998 

SA 

0.96 

0.96 

MN 

1.0 

1.0 

MA 

1.0 

1.0 

Overall 


Temperature 

Material  Type/Configuration  Exposure 

P(T*TC) 

Hold* 

Case 

P(t$te) 

Runaway 

Probability 

in  Drain 

119°C 

0.9995 

SN 

0.95 

0.95 

SA 

0.92 

0.92 

MN 

1.0 

1.0 

MA 

1.0 

1.0 

126°C 

1.0 

SN 

0.998 

0.998 

SA 

0.96 

0.96 

MN 

1.0 

1.0 

MA 

1.0 

1.0 

*  Key  -  SN  -  Separator  vessel  with  normal  operation 

SA  -  Separator  vessel  with  abnormal  long  holds 
MN  -  Melt  kettle  with  normal  operation 
MA  -  Melt  kettle  with  abnormal  long  holds 
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APPENDIX  D 


Discussions  of  Selected  Scenarios  and  Probability  Estimates 

In  this  appendix,  typical  scenarios  are  described  in  order  to  demonstrate 
the  rationale  used  to  estimate  probability  of  occurrence.  These  example  cases 
were  chosen  from  the  analysis  of  the  North  Tower  of  the  Washout/Steamout 
Building.  The  scenarios  are  presented  in  decreasing  order  of  estimated  proba¬ 
bility  of  occurrenceo  It  should  be  noted  that  the  most  dominant  North  Tower 
problem  areas  involved  runaway  reactions,  which  are  not  discussed  here. 
Appendix  C  is  devoted  to  that  specific  subject  area.  Not  all  of  the  North 
Tower  scenarios  are  presented  here. 
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Lance  Impact  Initiation  from  Rough  Handling  During  Steamout. 
ESTIMATED  FREQUENCY  =  5  x  10" 3  year 


Discussion 

In  this  scenario  the  operator  who  advances  the  steam  lances  is  extremely 
emotional.  As  a  result,  he  slams  the  lance  forward  with  great  force,  impacting 
it  onto  internal  piping  within  the  item.  It  is  judged  that  an  operator  will  have 
such  an  emotional  problem  once  per  year  and  that  one  of  these  occasions  in  ten 
trials  will  lead  to  him  slamming  the  lance  into  the  item  (probability  for  human 
error  under  stress]. 

The  major  question  in  evaluating  this  hazard  is  how  much  energy  can  the 
operator  impart  in  shoving  the  lance?  To  estimate  this  stimulus  energy  level, 
several  human  engineering  references  were  consulted: 

1.  Woodson,  W.E.,  Human  Factors  Design  Handbook,  McGraw-Hill  Book 
Company,  New  York  1981, 

2.  Van  Cott,  H.P.  and  R.G.  Kinkade  (edi tors ) .Human  Engi neeri ng 
Guide  to  Equipment  Design,  American  Institutes  for  Research, 

Washington  DC  1972. 

3.  Greenburg,  L.  and  D.B,  Chaffin,  Workers  and  Their  Tools,  A 
Guide  to  the  Ergonomic  Desi qh  of  Hand  Tool s  and  Smal 1  Presses , 

Pendell  Publishing  Company,  Midland,  Michigan  1977. 

These  sources  provided  human  force  levels,  either  the  maximum  achieveable  or 
the  level  acceptable  for  design.  Some  typical  force  levels  extracted  from  these 
sources  are  summarized  below: 

Forearm  Lift  (Upward);  267  nt  (60  lb) 

Lever  Push  (Foreward);  579  nt  (130  lb] 

Sitting,  Hand  Control  Push; 41 0-61 5  nt 
(92-138  lb) 

Lifting  and  Carryinq  a  Package; 

223-423  nt  (50-95  lb) 

Static  Push;  628-864  nt  (141-194  lb) 

Push  Foreward; up  to  223  nt  (50  lb) 

Upward  with  Arm; up  to  107  nt  (24  lb) 

Based  on  this,  it  is  not  unreasonable  to  expect  that  an  operator  could  apply 
445  nt  (100  lb)  of  force  to  shove  the  lance  into  an  item  under  unusual  cir¬ 
cumstances.  If  this  force  level  is  maintained  for  a  0.3  m  (1  ft)  push,  about 
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(maximum  force  expectation) 
(maximum  force  expectation) 

(50th  percentile  —  depends 
on  upper  arm  angle) 

(50th  percentile  —  depends 
on  lift  height  above  the  floor) 
(mean  values) 

(design  criteria) 

(design  criteria) 
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120  joules  would  be  applied  to  the  impact.  If  the  force  level  decreases 
linearly  to  zero  over  the  push,  about  60  joules  would  be  imparted  during  the 
impact. 

A  number  of  other  calculations  were  made  considering  commonplace  human 
activities,  e.g.  how  far  can  a  baseball  be  thrown,  These  calculations  yielded 
energy  levels  more  typically  on  the  order  of  10  joules.  If  10  joules  of  energy 

•  o 

is  applied  to  a  0,1  cm  area  during  a  lance  impact,  the  stimulus  would  be 
10^  j/m^.  This  impact  stimulus  level  would  be  sufficient  to  initiate  almost 
any  dry  explosive.  Liquid  explosives,  such  as  the  surface  layer  melted  inside 
the  item,  are  even  more  sensitive,  although  the  moisture  content  from  the 
condensed  steam  should  have  a  desensitizing  effect.  Based  on  the  above  discussion, 
we  would  expect  an  operator  to  be  able  to  initiate  the  explosive  inside  an  item 
if  he  were  emotional  enough.  Most  of  the  time,  the  lance  would  impact  the 
explosive  directly,  providing  some  cushioning  effect,  but  it  is  judged  that 
about  one  time  in  every  twenty,  the  lance  will  impact  onto  a  relatively  thin 
layer  of  explosive  covering  internal  metal  parts  of  the  munitions  item.  These 
situations  are  the  ones  that  are  likely  to  result  in  an  explosion. 

Frequency  Estimate 

Component  Description 
Lance  Operator  with  emotional  problem 
Operator  thrusts  lance  into  item 

Lance  tip  impacts  explosive  at  internal 
metal  part 

Initiation  results  from  impact 
Frequency  =  5  x  10~3/  year 

It  should  be  noted  that  when  operational  distractions,  operator  enthusiasm  to 
get  the  job  done  quickly,  etc.  are  considered,  the  scenario  frequency  could  be 
considerably  worse.  In  this  case  a  frequency  of  5  x  10"5/year  may  be  overly 
optimistic. 


Probabi 1 i ty 
1  time/year 
0.1 
.05 

1.0 
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Impeller  Impacts/Friction  Within  Melt  Kettle  or  Separator  Vessel 

Expected  frequency  -  2.22  X  10_3/year 
Discussion 

A  number  of  scenarios  have  been  identified  involving  impacts/friction  of 
the  impeller  against  the  vessel  wall  or  a  foreign  piece  of  metal.  In- order  of 
decreasing  probability  of  occurrence,  the  specific  failures  causing  the  inci¬ 
dents  are  as  follows: 

•  due  to  impeller  shaft  connection  failure 

•  due  to  failure  of  screen  above  separator  (foreign  piece 
enters 

§  due  to  excessively  worn  stuffing  box  for  impeller  shaft 

•  due  to  impeller  not  secured  well  after  major  maintenance 

•  due  to  cover  not  being  aligned  properly  after  major 
maintenance 

•  due  to  impeller  shaft  being  bent  after  major  maintenance 

In  order  to  evaluate  this  potential  hazard,  it  was  recognized  that  all  of 
the  energy  available  for  initiation  must  come  from  the  impeller  drive  motor. 
Thus,  the  "worst  case"  limit  for  frictional  initiation  is  the  motor  power  rating 
1  hp  (746  j/s)  for  the  separator  and  10  hp  (7457  j/s)  for  the  melt  kettle. 

Consider  the  potential  for  frictional  initiation  in  the  separator  vessel 
first.  The  separator  impeller  rotates  at  a  maximum  of  1  RPM.  This  corresponds 
to  a  tip  speed  of  0.072  m/s.  If  we  assume  that  10%  of  the  motor  power  goes 
into  frictional  heating  (i.e.  most  of  the  power  will  be  used  up  in-  agitating 
the  fluid),  then  about  75  j/s  will  be  dissipated  at  0.072  m/s.  Typical  kinetic 
friction  factors  for  greasy  steel  on  steel  are  on  the  order  of  0.1  (Ref.  Marks 
Handbook).  This  should  be  appropriate  for  a  steel  impeller  rubbing  on  a 
steel  vessel  wall  with  the  liquid  explosive  acting  as  a  lubricant.  The  asso¬ 
ciated  normal  force  is  given  by 

N  =  (o!o72m/s)(0.1)  =  104  nt 
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Based  on  the  geometry  it  is  estimated  that  rubbing  will  occur  over  a  0,1  cm2 
contact  area.  Thus,  the  friction  stimulus  can  be  described  as  109nt/m2  at 
0.072  m/s.  This  corresponds  to  an  initiation  probability  of  approximately  0,1, 
extrapolating  from  HBX-1  data  presented  in  Reference  1  (Hercules  data  in  the 
Battell e  report)*. 

.  Impact  tests  conducted  at  IITRI  (Ref.  5)  and  elsewhere,  indicate  that  the 
impact  typically  occurs  over  a  10  to  100ys  pulse.  If  the  energy  is  dissipated 
over  a  lOOys  pulse,  the  impact  stimulus  is  estimated  to  be 

.  •  <7^i>r  x  10~6>  =  750  o/n.7 

This  corresponds  to  a  negligible  initiation  probability  for  HBX-1. 

Even  if  a  factor  is  applied  to  account  for  increased  sensitivity  of  liquid 
versus  solid  explosive  and  if  the  total  motor  power  rather  than  10  percent  is 
taken,  the  probability  rises  only  ito  about  0.2o 

The  melt  kettle  will  operate  at  25  or  50  RPM  --25  RPM  (1.8  m/s)  will  be 
assumed  for  calculations.  If  we  assume  10  percent  of  the  motor  power  goes 
into  friction,  about  746  j/s  will  be  dissipated  at  1.8  m/s.  The  associated 
normal  force  is  estimated,  as  before 

J  =  746  j/s _  =  4.14  X  108  nt/m2 

•  (1.8  m/s) (0.1 ) (10"5m2)  . 

Data  for  HBX-1  (Ref.  5)  indicates  a  probability  of  initiation  of  about  0o012 
(at  1.219  m/s). 

Impact  over  a  100ys  pulse  and  a  0.1  cm2  area  in  the  melt  kettle  is  esti¬ 
mated  from 

e  =  (746  j/sM100  X  10-6,)..  „  7460  j/m2 
10" 5  m2 

corresponding  to  an  initiation  probability  of  about  3  X  10"4  for  HBX-1.  More 
conservative  (limiting)  assumptions  (all  of  motor  power  with  liquid  explosive) 
yield  a  probability  of  nearly  1.0  in  this  case. 


*HBX-1  data  is  used  because  the  initiation  probabilities  for  this  material 
were  found  to  be  highest  of  the  materials  considered. 
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Based  on  the  above  estimates,  an  initiation  probability  of  0.1  is  assumed 
for  the  separator  and  0.012  is  assumed  for  the  melt  kettle.  These  were  the 
highest  values  calculated  without  making  overly  conservative  assumptions. 

It  must  be  noted  that  considerable  uncertainty  exists  in  these  estimates  and 
it  is  not  clear  whether  the  values  assumed  are  indeed  conservative.  It  also 
seems  that  the  melt  kettle  should  be  more  susceptable  to  initiation  due  to  its 
higher  motor  power  and  impeller  velocity,  but  this  over  simplified  approach 
indicates  that  the  separator  is  more  hazardous. 


Examples  of  Frequency  Estimate  for  Highest  Probability  Scenarios 
A  -  Due  to  impeller  shaft  connection  failure  — 


Component** 
403  or  288 

402  or  287 
390  or  276 


Descri ption 

Impeller  shaft  Connection  Fails  (structural 
integrity) 

Loosened  .Shaft  Strikes/rubs  vessel  wall 
Impact/Friction  Stimulus  Causes  Initiation 


Frequency  =  2.22  X  10-3/yr  for  separator 


Probability 
5.34  X  10"6/hr 

1.0 

0ol (separator)2 
0.012(melt  kettle) 


Frequency  =  2.67  X  10-4/yr  for  melt  kettle 


B  -  Due  to  impeller  not  secured  well  after  major  maintenance  — 


Component 

289  or  404 

290  or  405 
290  or  406 
287  or  402 
276  or  390 


Description 

Maintenance  is  required  resulting  in 
impeller  disassembly* 

Impeller  is  not  securely  refastened 

Impeller  loosens  during  operation 

Loosened  Impeller  Impacts/Scrapes  Wall 

Impact/Friction  from  impeller  striking  wall 
causes  initiation 

Frequency  =  6.5  X  10“5/yr  for  separator 


Probability 
5.2  X  10"5/hr 

0.003 

1.0  (assumed) 

1.0  (assumed) 

0.1  (separator) 
0.012  (melt  kettle) 


Frequency  =  7.8  X  10"6/yr  for  melt  kettle 


*Major  maintenance  assumed  once  every  6  months  and  1/10  of  the 
time  requires  impeller  disassembly. 

**  Component  numbers  correspond  to  numbers  on  fault  tress  in  Volume  2. 
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Tool  Dropped  Into  Melt  Kettle  or  Separator  During  Major  Maintenance  (Jropact 
Initiation) 

Expected  Frequency  =  2.17  x  10"3/year 
Discussion 

If  a  tool  is  dropped  into  a  vessel  during  maintenance  operations  the 
stimulus  level  is  given  by  the  energy  of  the  tool  at  the  moment  of  impact 
distributed  over  the  impact  area,  or 

e  =  mh 
A 

where  m  is  the  mass  of  the  tool,  g  is  the  gravitational  acceleration,  h  is 
the  height  of  the  drop,  and  A  is  the  impact  area.  If  the  tool  is  1/2  lb 
(0.227  Kg),  is  dropped  from  a  height  of  1  meter,  and  impacts  over  an  area  of 
0.1  cm  x  0.1  cm  (10“6  m2)  the  stimulus  level  will  be  about  2.2  x  10^  -j^.  If 
the  impact  is  distributed  over  a  larger  area  (on  the  order  of  1/8  inch 
squared)  the  stimulus  level  would  be  about  an  order  of  magnitude  less.  In 
either  case  however,  according  to  data  for  HBX-1  in  Reference  5,  the 
probability  of  initiation  would  be  about  1  (i.e.  initiation  would  occur). 

Major  maintenance  requiring  removal  of  the  vessel  cover  is  assumed  to 
occur  once  every  6  months.  The  probability  of  a  person  dropping  a  tool  or 
metal  item  during  the  maintenance  is  about  0.01.  The  probability  that  a 
significant  amount  of  energetic  material  remains  in  the  vessel  and  the  tool 
or  metal  part  hits  the  layer  is  taken  as  about  .01  to  0,1.  The  basic  components 
of  this  scenario  are  summarized  below. 

Frequency  Estimate 

Component  Descri ption  Probabil ity 

Separator  Melt  Kettle 


315 

420 

Major  maintenance  is  required 

5.21  x  10‘Vhour 

316 

421 

Tool  or  part  dropped  into  vessel 

0.01 

317 

422 

Significant  quantity  of  material 

0,1 

present 

1 .0 

318 

423 

Impact  stimulus  causes  initiation 

Estimated  Frequency  =  2,17  x  lQ'Vyear 
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Rotoclone  Fire 


_  3 

Expected  Frequency  =  2.17  X  10  /year 
Discussion 

The  walls  inside  the  ductwork  leading  from  fume  collection  points  to  the 
Rotoclone  cleaner(water  scrubber)  are  expected  to  become  heavily  contaminated 
with  explosive  dust.  The  time  for  the  buildup  to  occur  must  be  determined 
during  the  operation  of  the  plant,  but  based  on  operations  of  similar  systems 
in  the  past,  the  buildup  may  occur  quite  rapidly,  A  Navy  Hazards  Analysis*** 
of  the  North  Tower  indicated  that  "the  explosive  buildup  from  fumes  inside  the 
ductwork  will  probably  be  about  1/2  inch  after  two  or  three  weeks  of  operation" 
based  on  experience,  within  the  ductwork  leading  to  the  Rotoclone,  initiation 
during  operation  should  be  quite  unlikely  since  there  are  no  moving  parts. 

During  cleanup/maintenance  of  the  ductwork  initiation  by  dropping  a  tool  or 
person  ESD  (e.g.  ungrounded  shoes)  is  possible.  If  maintenance  occurs  once 
every  six  months  and  an  explosive  layer  is  present  in  the  duct  at  that  time,  the 
probability  of  initiation  by  dropping  a  tool  is  expected  to  be  about  2.17  x  10_3/year. 
The  probability  of  initiation  by  ESD  would  be  quite  small  (about  2,3  x  10  5/year). 
Incidents  while  cleaning  the  ducts  can  be  avoided  by  more  frequency  cleaning 
(i.e.  to  prevent  the  layer  from  getting  thick)  and  by  attaching  tools  to  the 
operators  arm  with  a  short  cord  to  minimize  the  dropping  problem. 


If  the  Rotoclone  scrubber  operates  inefficiently  for  a  long  period  of 
time,  a  layer  of  explosive  dust  could  buildup  downstream  of  the  water  spray. 

Then  if  a  bearing  overheats  (e.g.  if  overgreased  as  warned  in  the  Installation, 
Operating,  and  Maintenance  Instructions,  or  if  the  bearing  becomes  contaminated, 
or  if  the  V-belt  is  too  tight)  the  layer  could  become  ignited  during  operation. 
This  scenario  is  evaluated  below  and  found  to  be  much  less  likely: 


FREQUENCY  ESTIMATE: 
Component 


Description 

Rotoclone  exhauster  not  inspected/ 
cleaned  frequently  enough* 

Excess  grease  put  into  bearings** 

Bearing  temperature  rise  causes  initiation 

Frequency  =  4.7  X  10"  /year 


Probabil itv 


2.96  X  10"  /hr 

3.85  X  10"5 
1.0  (assumed) 


♦Inspected  once  per  month  within  a  human  error  probability  of  .01 
**  Greased  once  every  6  months  with  an  error  rate  of  0.01  and  overheat  lasting 
about  8  hours  (assumed) 

***"Hazards  Analysis  Report  on  Washout/Steamout  System  of  Western  Demilitarization 
Facility,  Hawthorne,  Nevada,"  by  Naval  Sea  Systems  Command  (NAVAMPROENGCEN) 
Naval  Weapons  Support  Center,  Crane,  Indiana,  March  1980, 
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Rough  Handling  of  Separator  Dipstick 
Expected  Frequency  =  1.82  x  10"3/year 


Discussion 

This  scenario  is  characterized  (for  quantification  purposes)  by  the 
specific  case  where  the  dipstick  is  substantially  contaminated  with  explosive 
and  becomes  frozen  in  its  holder.  The  dipstick  is  then  tapped  with  a  tool 
to  loosen  it.  This  stimulus  is  considered  to  be  roughly  equivalent  to 
dropping  a  1  lb  (0.454  kg)  weight  from  a  height  of  6  inches  (15.24  cm)  with 
an  impact  area  of  1/4  inch  x  1/8  inch  (0.19  cm2).  In  reality  the  impact  may 
be  spread  over  a  wider  area  in  this  scenario,  so  the  assumed  area  could  be 
quite  conservative.  This  impact  stimulus  level  is  calculated  to  be  3.6  x  10  ~z » 
which  corresponds  to  a  probability  of  initiation  for  HBX-1  of  0.35  at  the 
50%  confidence  level. 


Frequency  Estimate 


Component 

295 

296 

297 

298 

299 


Description 

Graduated  dipstick  becomes  badly  contaminated 
with  explosive 

Dipstick  sticks  in  holder  due  to  contaminant 
Operator  rough  handles  dipstick 
Impact  stimulus  causes  initiation 
Reaction  propagates  to  bulk  of  explosive 
inside  separator 


Probability 
1 .0 

0.0125/hr 

0.001 

0.35 

0.1*(subjective) 


♦expected  to  be  high  due  to  narrow  opening  with  only  a  thin  layer  of  explo¬ 
sive  or  a  spark  to  propagate  the  reaction  into  the  vessel 
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Item  Impact  Scenarios 


Expected  Frequency  =  8.51  x  10  Vyear  (by  forklift  impact/penetration) 


Discussion 

Several  scenarios  were  identified  under  the  general  category  of  item 
impacts.  These  include  impacts  during  jib  crane,  building  crane,  and  fork 
lift  maneuvers,  items  being  dropped  from  a  jib  crane  or  building  crane,  and 
backing  the  driverless  tractor  cart  into  a  wall  or  component. 


Although  munitions  items  are  qualified  by  dropping  them  from  tall  towers 
numerous  times,  the  items  dropped  are  new  items.  Data  compiled  during  the 
Vietnam  war  for  750  lb  general  purpose  bombs  (Ref.  9)  indicates  that  items  in 
field  use  have  been  initiated  by  rough  handling  that  is  significantly  less 
severe  than  the  qualification  tests.  During  a  12  month  period,  5  explosions 
were  recorded  out  of  3005  mishandling  incidents.  .  This  data  would  indicate 
that  the  probability  of  explosion  per  mishandling  is  about 


However,  this  number  is  considered  to  be  extremely  conservative  because  not. 
all  of  the  mishandl ings  will  have  been  reported.  A  more  recent  study  (unre¬ 
ported)  conducted  at  IITRI  indicates  that  the  probability  should  be  more  on 
the  order  of  1.1  x  10"5  per  mishandling.  This  is  based  on  data  from  1968  to 
1972  during  which  3  midhandling  explosion  incidents  were  reported  out  of 
9,066,573  items  produced.  It  was  assumed  that  each  of  these  bombs  produced 
were  handled  about  10  times  and  that  there  were  0.003  mishandling  per  handling 
(human  error  probability). 

Example  Frequency  Estimate  (Forklift  Impact) 


Component 

73 

74 

75 
77 


Description  Probability 

Forklift  is  used  to  unload  items  at  north  1.86  items/hour 

tower 

Forklift  is  used  near  items  in  building  1.0 

Forklift  is  inadvertently  driven  into  item  .01  _5 

Impact  stimulus  causes  initiation  1.1  x  10 
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Person  ESD 


Expected  Frequency  =  8.12  X  10“Vyear 

(at  any  station  where  there  is  exposed  explosive) 

(NOTE:  For  the  plant  as  a  whole-several  stations  -  the  expected 
frequency  is  about  10-2/year) 

Discussion 

Each  day  personnel  must  get  dressed  for  work.  Management  controls  to 
assure  proper  clothing  should  be  well  established  and  strictly  enforced.  Pro¬ 
tective  clothing  should  include  fire  retarded  overalls  of  a  material  not  sus¬ 
ceptible  to  static  charge  buildup,  and  conductive  footwear.  It  is  suggested 
that  personnel  be  required  to  completely  change  from  street  clothing  into 
work  clothing  at  the  plant,  using  a  2  locker  system  (one  locker  for  street 
clothes,  plus  one  locker  for  work  clothes).  This  will  minimize  the  possibility 
of  improper  clothing  being  worn  in  the  plant. 

It  appears  possible  that  street  shoes  could  slip  through  such  a  system, 
although  quite  unlikely.  A  probability  of  10-3  is  assumed  for  the  operator  . 

making  such  an  error.  This  may  be  extremely  conservative,  depending  on  the 
management  controls  incorporated.  In  addition  to  the  operator  wearing  the 
wrong  shoes,  other  personnel  and  the  area  supervisor  would  also  have  to  miss 
the  error.  On  a  dry  day,  an  operator  wearing  ungrounded  foot  gear  could  be¬ 
come  charged  to  15  to  22  mj  or  higher  energies.  Such  energy  levels  have 
appeared  in  numberous  articles  throughout  the  literature  (e.g.  Reference  7). 
This  corresponds  to  an  initiation  probability  of  .05  to  0.1  for  HBX-1. 


Example  Frequency 

Estimate 

Component 

Description 

Probabil  ity 

109 

Operator  assembles  adaptor/seal  plate 
at  assembly  table  or  tilt  table 

1 .86/hr 

no 

This  operator  wears  ungrounded  shoes 
in  the  area 

.001 

111 

Area  supervisor  does  not  stop  him 

0.5 

112 

Other  personnel  do  not  stop  him 

0.7 

113 

Operator  becomes  charged 

(fraction  of  dry  days  in  year) 

0.3 

114 

Operator  discharges  to  open  item 

(most  likely  will  discharge  to  grounded 

0.1 

metal  elsewhere) 

0.1 

115 

Discharge  is  to  exposed  explosive  in  item 

116 

ESD  energy  causes  initiation  of  item 

0.1 

DIO 


Impingement  of  Viscous  Explosive  Onto  Grate  to  Separator  After  Line  Unblocks 
Estimated  Frequency  =  7.66  x  1  O'4 /year 
Pi scussion 

In  the  North  Tower  of  the  Washout/Steamout  Building,  a  flexible  drain 
hose  is  connected  between  each  tilt  table  and  the  piping  that  drains  into  the 
separator  vessel.  From  time  to  time,  this  hose  will  be  changed  either  to 
accomodate  new  items  and  new  tilt  angles  or  merely  to  replace  an  aged  hose. 

If  the  replacement  hose  is  too  long  for  the  tilt  angle  to  be  used,  the 
hose  may  dip  creating  a  low  point  in  the  line.  Explosive  will  tend  to  stag¬ 
nate  at  the  low  point,  solidify  near  the  wall  (the  wall  is  not  steam  jacketed) 
and  eventually  block  the  flow  in  the  line.  This  is  a  potential  problem  parti¬ 
cularly  for  the  highly  viscous  explosives  to  be  processed  (H6  and  HBX,  which 
fill  31  of  the  47  items  listed  for  the  North  Tower  in  the  Batelle  Report  --Ref.  1, 
i.e.  66%  of  the  items). 

When  the  line  becomes  blocked,  the  slug  of  solid  explosive  in  the  line 
may  eventually  be  forced  out  due  to  the  buildup  of  steam  pressure  in  the 
cavity  in  the  item.  15  psig  pressure  represents  a  force  of  about  100  lbf, 
which  neglecting  viscous  drag  at  the  walls  of  the  lines  could  accelerate  the 
slug  of  explosive  to  fairly  high  velocities  by  the  time  it  impacts  the  wall 
or  grate  in  the  inspection  box  just  above  the  separator.  The  slug  of  solid 
explosive  would  act  as  a  "hammer"  impacting  liquid  explosive  at  the  grate. 

Liquid  explosive  can  be  more  sensitive  to  impact  than  solid  material.  For 
TNT  the  impact  energy  required  for  initiation  drops  by  a  factor  of  6  going 
from  20°C  solid  to  100°C  liquid  (Reference  6).  In  addition  compression 
of  captured  air  bubbles  at  the  impact  location  may  be  a  factor. 

Based  on  the  diameter  and  length  of  the  drain  hose,  it  w$s  estimated  that 
a  10  kg  slug  of  explosive  could  impact  the  grate  over  a  4.6  x  10"4  m2  area  at 
the  velocity  that  the  steam  ultimately  flows  in  the  drain  line  (0.64  ^  ).  This 
yields  an  impact  stimulus  level  of  4.5  x  103  jp.  Using  the  Reference  1  Probit 
curves  as  the  baseline,  the  associated  ignition  probability  is  estimated  to  be 
about  .0015,  accounting  for  increased  sensitivity  of  the  liquid  phase. 
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Frequency  Estimate 


Component 

140 

154 

155 
174 

177 

178 

179 
233 


Description 

Steamout  operation  is  being  accomplished 
Liquid  explosive  is  highly  viscous 
Drain  line  too  long (human  error  probability) 
Line  becomes  blocked 
Line  unblocks  after  slug  forms 
Ignition  due  to  impingement 
Reaction  propagates  to  bulk  of  explosive 
Deluge  in  steam  lance  fails  to  suppress  this 
reaction 


Probabil  ity 

1 .86  items/hour 
0.66 
0.001 
0.1 
1 .0 
0.0015 
1.0 
1 .0 
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Impact  of  Separator  or  Melt  Kettle  Cover  Onto  Vessel  Lip  During  Major  Maintenance 


Expected  Frequency  =  2.17  x  10"5/year 


Discussion 


This  scenario  involves  impact  of  the  cover  of  a  vessel  into  the  vessel 
lip  during  a  major  maintenance  operation.  Even  when  assuming  the  initiation 
probability  is  1,  the  frequency  is  found  to  be  quite  small  due  to  the  small 
amount  of  energetic  material  present  during  the  maintenace  operation. 

Example  Frequency  Estimate 


Component 

Description 

Probabil  ity 

306 

Major  maintenance  is  required  involving 
removal  of  separator  cover 

5.21  x  10'4/hr 

(abt.  once  every  6  mos. 

307 

Vessel  lip  is  contaminated  with  explosive 

0.1 

310 

Operator  controlling  crane  causes  cover 
to  swing  into  vessel 

0.01 (human  error) 

309 

There  is  a  significant  amount  of  material 
present  in  the  vessel 
(Material  should  drain  out  generally) 

0.1 

308 

Impact  onto  vessel  lip  causes  initiation 
(P~l)  and  the  reaction  propagates  into 
the  vessel  ( P<0.1 ) 

0.1 
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Explosion  Due  to  Foamup  in  Melt  Kettle  During  Vacuum  Treatment 


Expected  Frequency  =  8.8  x  10  7/year 


Liquid  explosives  have  a  tendency  to  foam,  particularly  when  subject  to 
vacuum  and  agitation  as  in  the  melt  kettles.  Foaming  is  considered  to  be  a 
possible  mechanism  for  explosive  to  be  pulled  into  the  vacuum  system  during 
treatment.  If  in  addition,  pump  seal  water  is  lost,  an  ignition  source  could 
be  present  at  the  pump.  This  is  a  low  prob  ability  event  because  of  the  safety 
interlock  on  the  seal  water  and  could  be  eliminated  altogether  with  a  vacuum  trap 

in  the  line  to  the  pump. 

Frequency  Estimate 


Component 

427 

424 

429 

444 

442 

457 


Description 

Explosive  is  susceptable  to  foaming 

Explosive  foam  is  pulled  into  vacuum 
system  and  reaches  pumps* 

Explosive  gets  into  pump  moving  parts** 

Manual  water  supply  valve  for  pump  is  closed 

Water  pressure  interlock  fails  to  stop 
vacuum  pump 

Ignition  occurs  at  vacuum  pump  due  to  loss 
of  water  (friction  at  vanes  or  bearing 
overheat) 


Probability 
1 .0 

4.38  x  10"3 

1 .0  (assumed) 
0.01 

4.823  x  1 0”e/hour 
1 .0  (assumed) 


*Foaming  is  expected  to  occur  frequently  but  it  is  not  expected  that  the 
foam  level  will  reach  the  vacuum  port  unless  the  vessel  is  overfilled. 
Melt  kettles  will  be  filled  about  6  or  7  times  a  day.  At  an  error  rate 
of  0.01,  overfilling  may  occur  about  4.38  x  10"3/hour,  and  explosive 
may  remain  in  the  line  for  about  1  hour  thereafter  (P=4. 38  x  10  3) 

**Here  it  is  assumed  that  no  vacuum  trap  is  in  the  line. 
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ESD  -  Metal  Piece  is  Molded  Into  the  Explosive  Inside  an  Item  and  Charged  Up 

During  Steamout 

Expected  Frequency  =  very  low 

Discussion  (Reference  Appendix  A  for  Methodology) 


For  this  scenario  the  primary  unknown  is  the  leakage  resistance  for  the 
path  from  the  metal  niece  along  the  explosive  surface  to  the  grounded  metal 
casing  of  the  item.  From  discussions  with  personnel  involved  in  making  elec¬ 
trical  measurements,  it  is  anticipated  that  for  moist  or  dry  explosive  the 
resistance  should  be  essentially  open  circuit,  or  at  least  tens  of  megohms. 

There  is  expected  to  be  a  significant  decrease  in  the  resistance  as  the  surface 
becomes  moist  during  steamout  but  the  resistance  will  still  be  quite  high. 

If  we  view  the  "moist"  conduction  path  as  a  thin  film  of  water  (bulk  conductivity 
of  10"6  mho/cm)  the  resistance  of  a  micron  thick  layer  would  be  about  10  Q. 

For  a  10  micron  layer  it  would  be  108fi,  and  if  the  water  layer  were  0.01  cm 
(1 00y)  it  would  be  107(10Mft).  Surface  resistivities  for  a  number  of  materials 
at  30%  and  90%  Relative  Humidity  is  presented  in  reference  2.  The  comparison 
for  several  materials  is  presented  below: 


*note  R 


Surface  Resistivities  a  (ohms)* 


Material 

Paraffin 

at  30  R.H. 

at  90  R.H. 

1016 

5  x  1015 

New  American 
Hard  Rubber 

5  x  1015 

109 

Sealing  Wax 

3.16  x  1015 

0.0795  x  10 

Beewax 

0.63  x  1015 

0.63  x  1015 

Cell uloid 

79.5  x  109 

1.26  x  109 

Ivory 

15.9  x  109 

3.16  x  107 

Slate 

0.159  x  109 

107 

=  a  —  where  1 
w 

is  the  path  length  and  W 

is  the  path  width.  If 

R  =  a. 


1, 
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The  90%  RH  values  are  expected  to  have  higher  resistivities  than  would  exist 
inside  the  item  because  a  liquid  layer  will  be  present  in  the  item.  In  order  to 
bracket  the  problem,  for  the  "moist"  case  we  assume  that  the  leakage  path 
resistance  will  be  about  107ft.  For  the  dry  case,  the  data  shown  above  indicates 
that  the  resistance  could  approach  1016fl,  although  this  is  probably  optimistic 
(i.e.  too  low  a  value). 

Charging  Current 

As  will  be  done  for  the  "unbonded  adaptor"  scenario  later  in  this  appendix 
the  total  rate  of  charge  transfer  from  the  lance  is  taken  as  the  total  steam 
flow  rate  at  a  charge  density  of  10”6  coul/Kg.  The  total  charging  current  is 
then  4.15  X  1CT9  coul/sec.  Not  all  of  this  will  inpinge  on  the  metal  piece 
molded  into  the  explosive.  If  the  metal  piece  is  about  1  inch  (2.54  cm)  in 
diameter  and  the  lance  is  4  to  6  inches  (10-15  cm)  from  the  piece,  by  geometry 
only  about  1/100  of  the  charge  will  impinge  on  the  piece.  Therefore,  the 
charging  current  i-n  is  taken  as  4.15  X  10  11  coul/sec. 

Capacitance  of  the  Metal  Piece 

If  we  assume  the  metal  piece  is  about  1  inch  (2.54  cm)  in  diameter,  and 
well  away  from  the  metal  walls  of  the  item,  it  has  been  shown  that  the 
capacitance  will  be  about  1.4  x  10"12  f  (see  Appendix  A). 

Application  of  Circuit  Model 

The  maximum  voltage  attained  by  the  metal  piece  is  given  by 

V  =  i.  R 
in 

For  the  "moist"  case  R  is  taken  as  107ft.  This  yields  a  voltage  of  4.16  x  10  4 
volts  and  an  associated  energy  of  1.2  X  10-19  joules.  Clearly,  in  this  case 
the  voltages  and  associated  energy  levels  should  not  be  a  problem. 

For  the  dry  explosive,  we  assume  the  resistivity  will  approach  1016ft. 

This  drastically  changes  the  situation  in  that  the  computed  maximum  voltage 
now  becomes  4.16  x  105  volts.  This  corresponds  to  an  energy  of  0.12  joules. 

For  HBX-1  the  probability  of  initiation  by  an  electric  spark  of  that  energy 
is  in  the  range  0.5  to  0.84.  In  the  item,  the  explosive  will  be  hot,  tending 
to  increase  this  probability,  but  water  will  be  present  tending  to  decrease 
the  value. 
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However,  this  is  the  maximum  possible  energy  attainable  at  the  metal 
piece.  It  would  take  time  to  build  up  to  that  level,  the  time  being  the 
RC  time  constant.  To  approach  the  maximum  level  would  require  3.9  hours,  and 
by  that  time  the  surfaces  would  be  moist.  The  surfaces  should  be  moist  within 
minutes  of  steaming.  The  energy  at  the  metal  piece  would  grow  by  the  following 

relation: 

e  =  \  CV2 

t 

where  V  =  i-nR  (1  -  e  RC7 

After  one  minute  the  energy  would  only  be  2.2  x  10  6j  (HBX-1  ignition  proba¬ 
bility  would  be  negl igable) .  After  5  minutes  the  energy  would  grow  to  about 
5.5  x  10~5  joules,  again  corresponding  to  a  negligible  probability  for  HBX-1. 
These  later  cases  are  more  likely  to  represent  the  hazard  than  the  maximum 
possible  energy  noted  earlier. 
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ESD  -  Metal  Piece  Dropped  Into  Box  on  Weigher 


Estimated  Frequency  =  very  low 
Pi  scussion 

This  scenario  considers  a  metal  item  being  dropped  into  a  box  during 
filling  at  the  f laker  and  becoming  electrically  charged  as  the  flakes  fall 
onto  it.  The  boxes  being  filled  will  contain  55  lb  (25  kg)  of  flaked  explosive. 
As  discussed  in  Appendix  A,  materials  such  as  TNT  in  controlled  chuting  ex¬ 
periments  become  charged  to  about  10“5coul/kg  in  the  worst  case  (only  2.1  X 

10"7  coul/kg  for  TNT  itself).  Only  a  small  fraction  of  the  flakes  will  contact 
the  metal  piece  and  charge  it.  By  geometry,  it  is  estimated  that  only  about 
0.001  of  the  flakes  will  interact  with  the  metal' piece.  Thus  the  total  charge 
on  the  piece  will  be  about 

Q  =  (10-5  £°yl)  (25kg) (.001)  =  2.5  X  10"7  coul 

The  capacitance  of  a  2.54  cm  (1  inch)  diameter  piece  of  metal  will  be  about 

1.4  x  10"12.f.  TNT  in  bulk  has  a  resistivity  of  9  x  10  ohm-m.  This  would 

1  0 

indicate  that  the  leakage  resistance  will  be  about  10  ohms;  however,  the 
flake  form  of  the  TNT  and  the  presence  of  the  packaging  materials  should  in¬ 
crease  the  resistance  significantly.  It  is  expected  that  the  resistance  could 
reach  10  ohms,  based  on  surface  resistivity  of  dry  flakes,  and  this  value 
is  used  to  assure  conservatism. 

Thus,  the  maximum  voltage  of  the  metal  piece  should  be  about 


max 


4 

C 


2.5  x  10~7  coul  =  1  .79  x  1  05V 
1 .4  x  10‘12f 


In  reality  the  characteristic  time  for  charging  (RC)  will  be  quite 
large  (233  minutes).  It  takes  about  2.5  minutes  to  fill  a  box,  so  only  about 
1  minute  at  most  will  be  available  for  charging. 
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ESD  -  Poor  Electrical  Contact  at  Lance  Adaptor,, 

Voltage  Builds  Across  GAP 

Expected  frequency  =  very  low 

NOTE:  It  would  be  extremely  difficult  to  lose  electrical  bonding  by  any 
chain  of  events „ 

a)  if  a  non  conductive  rubber  replacement  gasket  is  used,  bolts  are 
still  used  to  connect  the  adaptor  to  the  mine.  The  bolts  will  make 
a  good  electrical  connection  at  that  end.  Loss  of  bonding  in  this 
way  is  not  considered  to  be  credible. 

b)  if  the  flange  to  the  lance  holder  is  allowed  to  become  extremely 
dirty,  it  is  possible  that  loss  of  bonding  will  occur.  Again  this 
is  unlikely  because  the  flange  faces  are  a  metal  to  metal  contact 
and  the  v-retainer  ring  is  another  metal  to  metal  bonding  vehicle. 

This  mechanism  is  taken  to  be  credible,  however. 

Resistance 

Based  on  measurements  made  by  IITRI  personnel  in  prior  projects  a  10  ohm 
resistance  across  a  "poor  contact"  is  reasonable.  To  check  this,  a  calculation 
was  conducted  assuming  a  0.05cm  gap  over  a  240  cm2  flange  area.  For  poor  bulk 
conductivity  materials  (e.g.  styrofoam  and  teflon)  the  resistivity  can  be  as 
high  as  1018  ohm-cm.  Thus, 

R  =  pj=  (1018)(^§)  =  2.1  X  1014ft 

If  the  gap  were  filled  with  water  (p=106  ohm  cm)  the  resistance  would  be 
about  210a.  If  it  were  filled  with  a  metal  oxide  (copper  oxide  has  p^l05ohm  cm) 
the  resistance  would  be  more  like  21ft.  It  is  felt  that  a  resistance  of  about 
10-20ft  would  be  most  realistic.  A  value  of  20ft  was  selected  for  calculations. 


Capacitance 

The  capacitance  of  the  flange  was  estimated  assuming  the  dielectric  con¬ 
stant  is  about  10. 

r  _  eo  kA  _  (8.85  X  IQ"12)  (10)  (0.024)  -  a  oc  y  ln"9f 
L  ~  a  .0005 


Charging  Rate 

To  estimate  the  charging  rate,  the  larger  charge  per  unit  mass  (Q/M)  value 

for  water  sprays  presented  in  Appendix  A  was  assumed  to  be  correct,  that  is 
10"6  coul/Kg. 
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The  voltage  after  a  minute  is  given  by 


V  =  V  (1  -  e"t/Rc) 
max  v 

=  1  .79  x  1 05  V  (1  -  e"  =  766  V 
The  associated  energy  is  then  given  by 

e  =  \  CV2  =  \  (1.4  x  10"  f)  (766V)2 
=  4.1  x  10"7  j 

The  probability  of  initiation  by  a  spark  of  this  energy  level  is  negligible. 

The  total  steam  rate  per  item  is  33  Ib/hour  (Reference  1)  or  4.16  X  10"3  Kg/ 

sec.  If  it  is  assumed  that  all  the  steam  acts  as  a  charge  carrier  for  this 

_  6 

scenario,  the  charging  rate  is  computed  to  be  4.15  X  10  coul/sec. 

Estimates  to  Characterize  the  ESP  Hazard 

Several  quantities  can  be  calculated  based  on  the  parameter 
above  in  order  to  characterize  the  hazard  potential.  First,  the  maximum  voltage 
that  is  possible  across  the  gap  is  limited  by  the  breakdown  electric  field 
strength  Eg  =  3  X  106  p  and  by  the  maximum  charge  given  by  the  circuit  model 
in  Appendix  A.  The  breakdown  field  limits  the  voltage  across  the  gap  in 

the  following  way: 

V  =  Eg  •  (gap) 

=  (3  X  106  ^)  (.0005m)  =  1500  V 
The  circuit  model  gives  the  voltage  as 

V  =  1inR 

=  (4.16  X  lO"9^!)  (20fl)  =  8.32  X  10"% 

The  circuit  model  indicates  that  a  negligible  voltage  can  develop  across 
the  gap.  A  spark  would  not  occur,  and  if  a  spark  could  occur,  the  associated 
energy  is  given  by 

e  =  hC V2  2 

=  3^(4. 25  X  10"9)  (8.32  X  10"% 

-23 

=  1.5  X  10  j 

which  is  a  negligible  value.  Even  if  the  resistance  across  the  gap  were  several 
orders  of  magnitude  higher  the  voltage  and  associated  energy  would  be  too 
small  to  pose  a  hazard. 
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APPENDIX  E 

SUMMARY  OF  ACCIDENT  REPORTS  FROM  DDESB  FILE 


(extracted  from  Final  Report  for  ARRADCOM 
Contract  DAAK1 0-78-C-0029,  "Development  of  a  Hazard 
Classification  Procedure  for  Inprocess  Propellant 
and  Explosive  Materials"  by  H.S.  Napadensky  and 
R.  Pape,  November  1979) 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  IN  FILTERS 
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2)  Pinching  cracking 

during  press  operation 


c 

C 

o 

o 

♦H 

•i-4 

4-1 

4-1 

cd 

cd 

u 

u 

•rl 

■o 

4-4 

LH 

•rH 

•rU 

a 

a 

03 

03 

CL 

a 

CO 

CO 

o 

o 

C 

o 

t 

•H 

03 

4J 

4-> 

cd 

cd 

o 

B 

•H 

4-1 

CO 

*i-t 

3 

O 

r— I 

0) 

a 

a 

u 

co 

3 

CO 

O 

'w' 

c 

03 

C  X 

- 

O  Td 

g 

•H  Cd 

0 

U  1-4 

C 

•r-4  Cd 

X 

4.  *i-4 

C 

Pm  Ll 

x 

c 

o 

•H 

u 

u 

•rH 

u 

[L 


<U 

C 


B 

u 

0) 

u 

03 

X 


O 

z 


1 

, 

1 

c 

c 

c 

c 

o 

o 

o 

o 

r— 1 

r— 4 

•r4 

•H 

C3 

•  i-4 

CL  r-4 

cd 

03 

4-3 

4-3 

r— t 

x  cd 

CJ 

ao 

cd 

cd 

1 

cd 

03  *i-4 

*rH 

T3  "O 

u 

u 

co 

u 

c 

•H  03 

•i-4 

*rH 

/ — s 

3 

•H 

1  03 

03  Cd 

P  CL 

4-4 

4-1 

DO 

03 

B 

4-3 

O  -C 

4-3  CL 

•pH 

•H 

c 

V-I 

x  cd 

cd  u 

03  U  O 

U 

U 

•pH 

o 

j-i 

O  G  4-4  03 

p  cd  u 

03 

03 

-C 

CO 

03 

-O 

u  B 

d  u'O 

a 

CL 

CJ 

c 

4J  03 

03 

r — 1 

CO 

CO 

c 

/"■s 

*r4 

C  /-N  > 

4J  /-N 

•H  '“'“V  X 

•pH 

cd 

cd 

03  P  *H 

c  cd 

cdO  o 

o 

o 

CL 

*>-/ 

4-1 

£  w  co 

•1-4  ^44 

C 

C 

W 

C 

o 

•r-| 

4-3 

g 

g 

c 

o 

*H  4J 

4-3 

a 

O 

o 

4-J  U 

o 

cd 

c 

c 

o  cd 

•H 

a 

rX 

X 

•pH  CL 

u 

P4 

El 

M 

c 

a 

s 

U  B 
Pl  M 

« 


c 

o 

u 


o 

z 

I— I 
GQ 

co 

pj 

oi 

Pm 


W  CO  ^ 

O  CO  H 


<  ^  ' 
H  O 
CO  ^  w 
M  PJ  Cl 


•  CO  < 


X  CO  PJ 

<J  h-l  05 


o 

o 

co 

cn 

0) 

i—i 

i— i 

•H 

o 

B 

o 

CM 

1 

o 

o 

o 

o 

un 

m 

o 

o 

00 

CO 

o 

o 

m 

in 

i£> 

r- 

i 

o 

O 

in 

o 

in 

CO 

o 


Pi 

z 

Q 

Q 

PJ 

P5 

05 

o 

o 

o 

o 

sc 

o 


CO 

H 

z 

CO 

Q 

M 

o 

a 

< 

a 

co 

H 

o 

co 

x 

CO 

CO 


Pm 

o 


>» 

05 


CO 


c 

o 

•rH 

CO 

o 


cl 

X 

CO 


c 

o 


co 

O 


a 

X 

CO 


o 

o 

o 

*rH 

•r4 

•rH 

CO 

CO 

CO 

o 

o 

o 

r—4 

r-^ 

!— ( 

CL 

CL 

CL 

X 

X 

X 

w 

w 

w 

c 

o 


co 

o 


Du 

X 

CO 


z 

co 

4-> 

H 

o 

M 

03 

Jm 

U 

cd 

z 

w 

H 

c 

CL 

5-t  03 
4-1  C 

z 

s 

DO 

C 

X  *H 

o 

PJ 

c 

DO  0 

03  _C 

Pm 

Pm 

•H 

c 

a 

S 

o 

U 

•pH  4-1 

4-1  Cd 

o 

0) 

CO  Cd 

03  6 

o 

d5 

i—4 

CO  U 

O 

f—4 

03  03 

i—4  DO 

03 

u  a. 

CJ  c 

Pu 

Pm  0 

CL  *H 

i 


PCD 

1 

l  03 

a  o  o 

CO  4-1 

U  co 

C  CO  *rH 

CO  Cd 

C  DO 

cd  P 

•pH  tH  4-1 

03 

c  c 

CJ  O 

e  cd 

u  c 

cd  *rH 

X 

do  c  Td 

CL  O  -H 

Q  DO  CO 

c 

C  03  -rH 

•pH  CO 

n  o) 

•rH  03 

•r—4  Q  t—4 

03  4J  CL 

U  -H  c 

•U  DO 

CO  O 

CO 

L3  Cd 

03  Li  -rH 

cd  x) 

CO  L3  co 

cn  , 

O  u 

1-4  4-1^2 

1—1  *pH 

03  C  C 

03 

g  03  CM 

i-l  Lt  O 

03  P 

U  03  O 

U 

OJ  CL  in 

•rH  Cd  Cd 

O  4-1 

Pu  B  O 

CL 

P5  O  -h 

s:  u  e 

c 

c 

o 

o 

•rH 

-H 

CO 

CO 

0 

O 

i—4 

CL 

CL 

X 

X 

w 

PJ 

03 

e 

C 

•rH 

•rH 

03  -U 

X 

co  cd 

u 

» 

1  D  r-4 

cd 

6 

Li  O  03 

B 

o 

cd  X  O 

u 

a 

03 

DO  4-3 

DO 

DO 

c  C  L3  03 

Td 

C  DO 

•H  -rl  QJ  c 

•r-4 

-rH  C 

4J  DO  Li  tH 

Li 

03 

GO-rH 

Cd  'O  Li  ^2 

4J 

CO 

DO  4-1 

r-4  -rl  cd  U 

Li 

D 

3  U 

QJ  Li  -U  cd 

cd 

O 

r—4  Cd 

O  4-1  CO  6 

o  x 

CO  CL 

CO 

CO  co 

H-H  CO 
H  M 
M  05 
rJ  Z 
<  •“) 
H  Z 
<  M 
CO 


CM 


CM 


o 


o 

o 


LO 


H 

Z  <"N 


X  CQ 

O  hJ 


H 

Z 

CO 

o 

< 


c/3  *H 

o»  C 

OD  ^ 

1—4  oi 

1-4  O  w  < 
oh  Vi  i 
Pm  <  03  ^ 

•-)  u  <r 
O  o  O 
o  o  c  o 

r-4  o  DOX 
<2  4-|  *rH  's—/ 


Li 

03 

Td 

3 

o 

CL 

X 

C3 

m 


u 

o 

4J 

<d 

c  c 

•H  O 
cd  -U 
U  0) 
to’d 

VD  >H 

•  EM 

oo  < 


03 

X 

C-rH 

O  N 

*0  <c 

03 

•H  Td 
CO  Cd 
O  03 

cl-i 

0 

o  CO 

O  3 

f— < 

<  a 


o 

o 

CM 


•  •  g 


cd 

0)  E 

l—l 

L  O 

0) 

o<r  oj 

o 

D  rj 

•rH  Ll  »H 

cd  ^ 

O  4J 

•rH  O 

03  4-1  U 

e  <r 

DO  03 

o 

Li  4J  *n 

i  c 

cd  C  O 

g  -rH 

JC  03  U 

<  4-1 

u  g  a 

m 

CM 

r- 


02 

CO 


B<t 
in  i 
o  u 


o 

o 

CM 


t  03 
•rl  C 


D  *H 
L»  O 
••  o>  Li 
u  a  u- 

14-1  >>tH 
*rH  I— I  Cm 

u  do 
X  O  *0  . 

O  Li  £  «-« 

o5  u  cd  oo 


0) 

c 

•i-4 

M 

03 

O 

>n 


m 

CM 


cd 

•rH 

e 

l  CO 

x 

•H  O 

o 

§  s  b* 

3  -  cd  g 

c 

■rH  03  rJ  O 

•H 

•rH 

CO  4-1  U 

4-1 

4~> 

CO  Cd  C 

cd 

03 

cd 

cd  Li  o  - 

c 

4-> 

r— H 

4->  4-3  Ll  O 

o 

0) 

•H 

0) 

O  -rH  O  Cd 

♦rH 

o 

6 

o 

CL  Z  DP  c 

4J 

CQ 


CO  • 
PJ  O 

o 

CM 

CM 

r-4 

CM 

r— 1 

ON 

o 

00 
f— 1 

CO  Z 
< 

o 

r-» 

CM 

r~M 

in 

iO 

r- 

ON 

00 

00 

ON 

ON 

El  6 


i 


CO 

w 

CO 

< 

u 


w 

rJ 

CQ 

< 


CQ 

§ 

a* 


c 

o 

•X 

co 

CO 

o> 

x 

a. 

s 

o 

O  /-v 
CO 

U  X 
•X  O 

u  a 

cd  cd 

> 

X  4-( 

'O  o 

<  ^ 


X 

u 

co 

CL4*i 

6  x 

•X  Cd 
CU 
C  cn 
O 

•x  a 

X  -X 


a  x 
•x  co 

X  X 
CO 


X  CM 


c 

cd 

43  ^ 
o  co 
0)  CO 

6  <u 
^  x 
a 
c 

o  <x 

•X  O 


O  04 
*X  X 
X  3 
<X  X 


*X 
U  Cd 
a  im 
cd 


CLX 
£  * 
M  O 


to 

c 

u 

•H 

X  -X 

1  X 

c 

0)  X 

CO  Z 

X 

cl  a 

•rl 

3  T3 

cl-x 

E  x 

X  C 

O  Cl 

c 

04 

X 

>>  cd 

c 

X  0 

X  t 

a)  x 

4J 

E  x 

cu  a> 

X  C 

x  cd  <d 

£  CO 

a  -h 

04  X  G 

4-1  X 

X 

C0  *X 

a)  cu 

V-I  X 

0  <4-1  X 

x  $ 

O  X 

cd  o 

V-' 

5  o 

o  X 

X 

£ 

1  X  X 

c  c 

1 

.  C  C-r-C 

o  cd 

X 

0  0)  > 

•p-i 

/-v 

4-1  O 

4J 

*X  0 

4-1  04 

Cl) 

o 

o 

4-4  c  X 

O  X 

4J 

cd  04 

X 

cd 

U  60  O 

•X  X 

cd 

Dl  CO 

CO 

CL 

•X  -r-l  O 

x  cd  «— * 

E  Cd 

a 

E 

MHH 

(X  X 

a 

M  x  X 

x 

x  cd  x 

1 

CO 

4-J 

c 

V-i 

C  1 

cd 

o 

04  X 

1  X 

c 

X 

CL 

B  c 

CO  U 

o 

a 

cd 

c  x 

X  cu 

X 

cd 

> 

t0 

£  e 

X 

X 

X  X 

u 

c 

X 

,X  <d 

•  *  * « 

c 

o 

0 

cd  C 

X  £  c 

C 

3 

a 

co  o 

a  cd  o 

o 

X 

c 

X  X 

cd  x  x 

*1—1 

H 

r— 4 

o 

£  x 

a  x 

X 

<d 

cd 

•rH 

o 

E  <x  a 

a 

E 

X 

<u 

x  x 

x  o  C 

X 

04 

0)  V-I 

^  33 

V-I 

X 

E 

c 

bCX 

C  x  x 

X 

cd 

1 

o0  x 

C 

OCX 

a 

0 

X  u 

3  50  C 

x  cu  cd 

•  - 

•H 

X 

o  cd 

x  C 

O 

X  £  £ 

X 

C 

1 

x  a. 

CL  X 

X 

cd  c 

CJ 

m  x 

3  £ 

l  CO 

4-4 

U  tOX 

cd 

X 

cd 

<  X 

a>  3 

cd 

•rl  *r-l  Cd 

CL 

a 

X 

•X  cd 

•r-l 

V-I  X  O 

£ 

cu 

0) 

X  O 

4-) 

tL  «X 

X 

:s 

£ 

X  CM 

O 


CO 

CO 

Cd 

ed 

a, 

o 

s 

X 

OS 

XI 
Q 

Q 

W 

OS 

OS 

X 

u 

CJ 

o 

X 

u 


w  w  ^ 

U  CO  H 

53b 

H  o 
co  w 
X  W  o 

•  CO  < 
X  CO  W 
<  H  os 

2  r  03 


w 

a. 

>< 

H 

I 

H 

X 

CL, 

H 

X 

o 


CO 

Cd  CO 
X  Cd 

H  2 
M  OS 
X  X 

<  x 

H  2 

<  M 

(X 


H 

X  ^-N 

X  03 

O  X 


X 

04 

CL 

u 

X 

•rl 

W 

t2L 

CO 

CO 

C 

I  04  V4 

o 

X  v-i  04 

CO 

X  CL  X 

*r4 

U  ^  04 

c 

04  00  X  £ 

c 

>  C  co  cd 

04 

X  CLX 

Q  co 

V-i  ^  T3 

i  co 

cd  o  o 

tO  04 

X  o  o  I 

C  V4 

O  x  O  Mt 

X  CL 

to  03  CM  \ 

CO  x 

cd  ro 

CO  X 

Li  x  X  1 

04  X 

cd  cd  cd  x 

U  3 

Um  a  ^x 

CL  S 

CM 

o 


o 

O' 


x 


c 

c 

X 

c 

C 

o 

o 

c 

to 

0 

X 

X 

0 

X 

•r4 

CO 

CO 

cn 

O 

o 

X 

X 

o 

X 

X 

♦H 

CO 

X 

CL 

CL 

c 

cd 

CL 

X 

X 

to 

r— 4 

X 

w 

w 

X 

tX-4 

w 

co 

CO 

U  <14 

04 

0  x  co 

M 

^  to  CO 

CL 

c 

1  c  <14 

0 

tox  V-i 

to 

C 

c 

•rl 

C  CO  CL 

c 

to  o 

to  o 

X 

X 

X 

C  X 

C  X 

cd 

x  u  c 

X 

x  x 

X  X 

V-i 

04  04  O 

04 

co  cd 

CO  Cd 

T3  C0 

x  c  x 

X 

co  V-i 

CO  V-I 

CO 

x  x  x 

tX 

04  04 

0)  04 

X  04 

Q)  04  O 

04 

U  CL 

V-l  CL 

04  V-i 

CL  X  < 

CL 

CL  O 

CL  O 

a  cl 

o 
■ — 
o 


o 


CM 


LO 

o 


CM 


CM 


1 

CO 

O  1  0) 

X 

T3 

Cl  to  }-i  IX 

04  U 

X 

£  X  X  XX  cd 

rH  Cd 

o 

H 

1 

o  "~'<x  V-I  W  X 

X  X  co 

< 

z 

O  X 

a  -o  C 

04  V-i  J-i 

U3 

M  C 

C  *  ^  0) 

CL  Cd  04 

o 

o 

CL  cd 

04  O  V-I  -  04  £ 

X  x 

•rH 

< 

iX 

u  x  04  >>  V-I  X 

o  x 

V-I 

r--  *x 

cd  x  x  cd  cd  x 

X 

O  V-I  C 

u 

x  a) 

X  X  X  X  X  04 

CQ 

X  o  to 

•rH 

S  CL 

Cu  CO  C  OX  CL 

(L 

<  X  X 

CL 

CQ 

03 

vO 

03 

0J 

o 

m 

X 

'D 

CO 

z 

<r 

O 

O 

< 

O' 

X 

l—l 

X 

1 

CM 

i 

MD 

M3 

r- 

00 

00 

CM 

03 

03 

t — ^ 

m 

CM 


QJ 

X 

•i-4 


X 

I 


d 

C 

C 

C 

C 

o 

o 

o 

0 

0 

X 

X 

♦r-4 

•H 

•rH 

CO 

CO 

CO 

CO 

CO 

0 

O 

o 

0 

o 

X 

r— 4 

X 

X 

X 

CL 

Cl 

CL 

CL 

CL 

X 

X 

X 

X 

X 

w 

w 

w 

w 

w 

to 

tc 

c 

c 

04 

X 

•rH 

X 

X 

X 

X 

04 

T3 

04 

04 

-X 

1 

«x 

r-H 

o 

V4 

1 — 1 

X 

o 

04  X 

04 

04 

r— 1 

tox 

CL  CO 

CL  CO 

CO 

-Q 

co 

C  X 

co 

CO 

co 

1 

co 

3  x 

X  04 

X  04 

04 

0) 

04 

r— i  cd 

■  Z>  X 

3  x 

X 

X 

X 

CL  £ 

X  Du 

X  CL 

CL 

CL 

CL 

03 

i 

1 

o 

O 

i 

1 

o 

CM 

* — 

X 

X 

c 

1  04 

5  > 

X 

X 

O  x 

04 

04 

CL  O 

iX 

rH 

1 

co 

<x 

rH 

cd 

C  ^  x 

04 

04 

c 

04  O 

CL 

CL 

cd 

04  Cd  43 

3 

X  04  co 

iX 

i— 1 

to  W3  X 

>, 

X 

o 

cd  x 

X 

X 

X 

04  O 

H 

X 

X 

H 

X 

c  x  CL 

z 

04 

0) 

S 

•X 

■X  04  Cd 

H 

H 

H 

H 

Z  T3  T3  > 

r- 

ON 

r^ 

r-H 

<r 

r-> 

r^- 

00 

X 

m 

MD 

M3 

M3 

r- 

r>- 

m 

• 

* 

El  7 


co 

ui 

uo 

< 

u 

w 

CQ 

< 

CQ 

o 

cd 

Pm 


'TO 

QJ 

P 

QJ 

P 

~P 

cO 

Di 

TO 

QJ 

u 

0 

AJ 

Cl 

QJ  QJ 

CL  5m 

4-J 

n 

5M  r-l 

cO  O 

c\ 

o 

co 

i—l 

r-l  XX  D  r-l 

Mao 

r— 1 

Li 

cd 

CO  CJ  CO  QJ 

AJ  Cd 

♦r-l 

x 

QJ 

4-1 

•r-l 

•r-l  C  W  PL  £ 

a  > 

AJ 

xx 

FT0 

M 

Li  3  QJ  CO 

QJ 

•r-l 

AJ 

•r^ 

m3 

QJ  AJ 

QJ  CL  U  QJ  U 

AJ 

c 

QJ 

CO 

AJ  C 

AJ  CL  >  1 

4-1  C 

DC 

1  r-l 

£ 

cO  QJ 

CO  4m  -r4  C 

0  QJ 

•r4 

* 

C  rM 

CO 

B  B 

E  o  a>  co  o 

> 

o 

Li 

0  CO 

M 

C 

>  CO 

C  r-i 

AJ 

QJ 

•r-l  £ 

l 

C  DC 

c  QJ  ‘H  QJ  CL 

o  o 

xs 

Xm 

CO 

AJ 

D0‘r4 

DO  5m  co  a  pi 

•H  CO 

CO 

1  AJ 

c 

PJ  QJ 

a 

•r-l  i— 1 

•r-l  P  CO  X  TJ 

CO 

QJ 

o 

U  -H 

CO 

QJ  co 

QJ  i—l  QJ  QJ  i—l 

co  -a 

DO 

i  i—l 

•r-! 

AJ  TJ 

CL  QJ 

Ll  CO 

u  -.-I  a  -h 

qj  e 

fP  r-l  O 

aj 

E  *H 

O  -H 

O  CO  X  O  p} 

5m  cd 

*rH 

XXP 

o 

CJ  M  TO  Dm  2 

Dl  Dm  W  AJ  XX 

a 

CO  xx  o 

.-J 

E  5m 

P  AJ  CJ 

JM  /-N 

/-N 

o 

cO 

QJ  r-l 

Dm  r— 1 

CM 

co  <r 

r-l  CM  CO 

O  CO 

a 

W  CO 

■ — 1  GJ 
cd  -H 
O  -O 
co 

c 

U-i  -H 

o 

o 

C  O 
o  co 

•H  4-1 
AJ  U 
CO  0) 

C  4J 

•rM  C 

B  -H 

CO 

AJ  0) 

c  c 

O  *H 

O  H 


co  4-i 

CO  O 


AJ  I 
CO  O  AJ 
U-H  c 

Cfl’O-H 

o 

co  TO  CLi 
CO  C 
5  CO  1—1 

cO 

E  QJ  u 
cO  u  O 

Od  cd  4m 
PC 
i  a> 

•  CO  XX 
^  CO  aj 
CO  CJ 
CO  Jm  CO 
cO  Pl  cO 


0) 

DO 
C  M 
O  cO  >> 
•H  XX  aj 
co  U  -M 

CO  1-4 


qj  c 


to 

QJ 


to 

c 

>s  CO 

jo  I 
QJ  QJ 
T3  X)  O 
GJ  XX 

a 


•H  XX 

P  c 

•rM  DO 

•rl  JM 

.  CO  *rl 

QJ 

a  o 

c  c 

5X  P  DO 

5m  CO 

r— 1 

•rl 

•rM  *rH 

DO  CO  C 

cO  co 

a 

TO  AJ 

5m 

•r-l  CO  •ft 

O 

•r-l 

a  v 

1-M  P3  CO 

QJ  AJ 

r-  a 

AJ 

CO  -H 

CO  TO  CO 

Jm  5m  CJ 

5m 

U 

AJ  QJ 

qj  a  co 

c  c 

cO 

AJ  4-J 

CJ  /"n  U 

TO  Vm 

O  0 

a 

CO  1 

B  c  a 

S  •-  AJ 

•r4 

P  DO 

o. 

OCX 

r-l  AJ 

c 

TO  C 

C  *rl  4-1 

a  o  aj 

QJ  CO 

DO 

•r-l 

DO  LJ  o 

♦H 

QJ  *H 

•H 

co 

•  a 

•rl  CJ 

QJ  AJ  c 

XX  AJ 

QJ 

CO 

r-l  a  c 

QJ  *H  c 

CO  U  QJ  ’ 

•rl 

Jm 

QJ 

a-<-i  o 

5m  Jm  O 

O  -H  GJ  i 

4m  q 

0 

5m 

X  i-H  -H 

0  4-1  -rM 

O  }M  ^ 

O  -H 

Dm 

a 

DO  CO  AJ 

Dm  w  AJ 

i-J  4-1  AJ 

AJ 

c 

o 

o 


o 

2 

►M 

CO 

CO 

w 

Cd 

Cu 


DJ  CO 

a  co  h 

2  <  D, 

<  m3  w 

H  O 

co  dj 

H  W  u 

•  CO  < 
X  CO  CO 

<  H  Od 


o 


c 

o 


c 

•rM 

CO 

o 

I—l 

C 

C 

o 

a 

O 

O 

•r-l 

X 

•H 

•rl 

CO 

DJ 

C/3 

CO 

o 

l 

0 

o 

r — 1 

QJ 

H 

1— l 

a 

5m 

a 

a 

x 

•H 

X 

X 

w 

Dm 

DX 

DJ 

I 

B  co 
■h  a) 
u 

O  cO 
AJ 


QJ 

QJ  U 

DO  co 
cO  *H 


£  T3 
CO  QJ 

a  e 


C 

n-Fire 

C 

C 

o 

o 

o 

O 

•rl 

•r-l 

•rl 

•r-i 

CO 

CO 

CO 

CO 

o 

O 

o 

O 

1—1 

r-l 

1—1 

i— l 

a 

a 

a 

a 

X 

X 

X 

X 

DJ 

DJ 

DJ 

w 

CO 

H 

2 

DJ 

a 

M 

o 

CJ 

< 

a 

w 

C-M 

CJ 

dj 

w 

CO 


pL, 

o 


>< 

od 


CO 


o 


u 

QJ 

U-l 

CO 

C 

cO 

U 


C 

o 

AJ  CO 
CO 

O  QJ 

o  u 
co  a 


co 

DJ  CO 
i-i  za 
H  M 
M  Qd 

r-J  PX 

< 

H  2 
<  M 

Dm 


o 


H 

2  ^ 


2  aq 
O  rJ 


H 

2 

CJ 

o 

< 


H 

2 

H 


QJ 
Xd 
«0 
i— l 

Dm 


DO 

1 

c 

♦rl 

•H 

AJ 

AJ 

5m  DO 

QJ 

QJ  fX 

i-M 

>  -H 

i—l 

Xd 

QJ 

}m  O 

a 

CO  O 

XX  f— i 

QJ 

CO 

P  XX 

Xd 

CO 

DO 

o 

QJ 

JM  i-M 

AJ 

Di 

cd  co 

CO 

a 

Dm  O 

T3 

O 

O 

£ 


a 


CO 

Dm 

CO 

CO 

CO 

QJ  , 

z 

QJ 

Jm 

m 

Jm 

a 

rM 

Pm 

AJ 


CO 

QJ 

CO 

rM 

QJ 

i-M 

U 

QJ 

a 

a 

Jm 

CO 

oj 

CO 

QJ  CO 

CO 

AJ 

CO 

Xd  CO 

CO 

Jm 

QJ 

O  0) 

QJ 

o 

Jm 

AJ  Jm 

}M 

Pm 

-  Pl 

co  a 

Pm 

QJ  AJ 
.-M  QJ 
txO  »~4 

c  *-m 

•rl  QJ 
CO  Pm 


C 

O 

•r-l 

AJ 

•r-l 

CO 

o 

CL 

S  CO 

O  I 

o  < 


c 

CO 


QJ 

CL 

O 

U 

CU 


u 

DO 

00 

co 


CO 


AJ 

Jm 

AJ 

QJ  XO  Jm 

•  QJ 

DO 

rM  I-M  QJ 

N  i-M 

r-M  a 

O  i-M 

vO 

qj  o  a 

0) 

r-M 

a<r  o 

cm  a 

Xm 

CM  +  w 

I 


AJ 

1  Jm 

Jm  aj 

c 

QJ  Q) 

O  QJ 

QJ 

Jm  TO  T3 

4M  rM 

H 

Jm 

> 

3  QJ 

Jm  i-M 

2 

CD 

rM 

Jm  0  -U  /-n 

QJ  QJ 

H 

TO 

o 

o  a  u  to 

a  a 

5 

CO  /-N 

T3  qj  jx 

GJ 

O 

w  CO 

Cd  Xd  *r"ViM 

•  TO 

Xd 

a 

CO 

AJ  Jm  QJ  cd 

W  QJ 

H 

cd 

S 

r*-  QJ 

CO  0  Jm  Jm 

•  AJ 

z 

i-M 

3 

S  rM 

X  w> 

O  CO 

H 

Dm 

O 

CQ 

CO  * 
DJ  O 
CO  2 
< 


v£> 

CT» 


40 

O 

m 


<r 

Ol 


CM  00 

O  r-H 

00  N 


co  r- 

in  r- 

mo  co 


m  O 

r-  i— i 


El  8 


C/3 

w 

00 

ZD 

< 

u 


U 

CQ 

< 


CQ 

O 

Pi 


Pm 


I 

i 

6 
0 
1  cj 

X 

c  u 

QJ  X 
>  X 
«— i  cd 
O  JD 
w  £ 


4-t  T3 

o  cd 


£  >»  c 
O  Xi  o 

X 
X  03 
O  03 

c  a  0) 

6fl  cd  X 
>  cm 


i 

a 


>% 

x 

x 


03 

03 

O 

CM 


o 

£ 

c 

X 


i 

QJ 

X 

X  i 

X 

X  1 

CJ 

CJ 

O  03 

x  i  o 

c 

O  X  X 

cd 

x  B 

CM  CD 

Q  X 

cd 

03  Cd  CD 

X 

u  x  cd 

£  X 

Cd  CD 

ai 

Cl 

X  3  5m 

>  CM 

C  O0 

CD 

x  X  CD 

CD  £ 

X  03 

£ 

o  x  cd 

X 

0  X 

X  £  0 

cd  x 

X  o 

x  o  p*i 

X 

T3  cd 

3  0  0 

x  o  x  cd 

£  O 

03  X  O 

C  Qj  X 

0  JC  X 

cd  xxx 

QJ 

03  X  O 

c 

O  03  X 

a  3 

x  E  x 

>  a 

CD  CD  x 

qj 

•H  £  X 

X 

X  QJ  X  X 

X  X 

X  'XX 

CD 

03  Cd  C 

X  03  03 

Cd  0  X  c 

0  x 

CM 

03  O  X 

0  x  c 

I  X  X 

03  Cd 

E  x  0 

Qj 

CD  x 

C  X 

X 

O  0  X 

0i  X 

X  03  O 

£  CM  cd 

O  £  0  00 

x  cd 

cj  cm 

x 

u 

a  4  x 

O  CM  00 

x  o  c 

o  x 

cd  cd 

c 

£  o 

x  cd  cd 

xx  £  x 

X) 

CJ  >  £ 

C 

§ 

o  a  ex 

03  x 

X  03  3  x 

£  cd 

x  XJ 

o 

p. 

O  cd  3  CD 

03  X  X 

£  03  O  x 

O  1 

X  X 

»r-| 

>  i  > 

0)  o 

00  CD  T3  O 

X  03 

Cd  £ 

4_) 

Ml 

X  T3  X 

X  £  03 

X  X  P*  x 

X  X 

X  QJ  X 

(J 

1) 

•H  X  X  03 

a-  o  03 

O  CM  Cd  X 

x  O  £ 

cd  >  o 

u 

X 

CM 

CL  £  X  O 

E  x)  o 

x  £  o  £ 

£  Cm  O 

X  f— 1  X 

c 

Ml 

QL, 

cd  qj  3  x 

0  £  X 

£OXO 

co  cd  x 

d  o  o 

vD 

X 

D 

»J  >  X  CM 

O  £  CM 

<uxo 

X  >  03 

<03  O 

> 

u-t 

o 


c 

o 

X 

03 

03 

qj 

x  x 
a  o 
e  cm 
O  cd 
cj  > 


CJ  TJ 
X  CD 
x  co¬ 


ed  CM 
X  cd 
cd  x 

X  X 
"3  £ 
<  QJ 


c 

o 

a 


o 

z 


oo 

00 

w 

Dd 

Pm 


to  to  ✓-> 
U  C/3  H 
2  < 

<  X  ^ 

H  O 

00  \  w 
X  PJ  O 

Qrisi 

■  CO  < 
X  CO  y 

<  H  Q£ 

ZSpq 


o 

z 


pi 

ZJ 

Q 


Q 
W 
Pi 
Q i 
X 

o 

o 

o 


cd 


1 

CD 

X 

cd 

o  <r 

X 

0) 

00 

X  03 

*t>  £ 

Cd  03 

QJ  X 

X  QJ 

x  *£ 

T3  X 

X  x 

£  x 

QJ  CM 

i  x 

X  £ 

X  X 

X  o 

£ 

n-Fire 

o 

o 

X 

•X 

03 

03 

o 

0 

QJ 

r—4 

CM 

CM 

X 

X 

X 

•H 

X 

CJ 

Cn 

>» 

cd 

cd 

cd 

X 

X 

X 

0) 

CJ 

<y 

X 

u 

X 

cd 

cd 

cd 

•H 

•X 

X 

T3 

do 

T3 

a)  cd 

cj  £ 

QJ  Cd 

£  CD 

£  QJ 

in 

£  QJ 

£  X 

£  x 

CM 

E  x 

x  cd 

X  Cd 

X 

x  cd 

QJ 

QJ 

X 

X 

X 

•X 

Pm 

Cjm 

£ 

£ 

c 

c 

o 

0 

o 

0 

X 

X 

■X 

03 

03 

cn 

03 

o 

o 

0 

o 

r—4 

X 

1^-4 

T - 1 

CM 

CM 

CM 

CM 

X 

X 

X 

X 

CJ 

U1 

w 

PJ 

u 


cj 

u 

< 


Q 

w 

H 

u 

w 

X 

w 

CO 


Pu 

o 


>4 

a: 


CO 


z 


o 


Cd  03 
CJ  03 
X  CD 
X  X 


x  a 
a) 

>  6 c 

c 

<T  *H 
CO  O 

t  o 


x  X 


0) 

X 


•H 


>» 

X) 

03 

X 

X 

03 

cd 

03 

o 

QJ 

X 

03 

CJ 

X 

o 

QJ 

CM 

X 

X 

CM 

Q 

4-1 

03 

03 

CD 

0)  03 

rX 

Pi 

03 

03 

X 

X  03 

o 

03 

QJ 

X 

O  QJ 

o 

z 

QJ 

X 

QJ 

X  X 

1—1 

in 

X 

CM 

Pm 

CQ  CM 

CQ 

X 

CM 

1 

£  03 

03 

£ 

Cd  03 

03 

X 

£  Qj 

Qj 

TJ 

X 

H  X 

X 

o 

z 

X 

rX  CM 

CM 

o 

CM 

QJ 

03 

X 

5 

H 

0) 

X  GO 

GC 

£ 

CD 

C/3  £ 

c 

X 

o 

X 

1 

Q 

cd 

X 

CM 

£  s: 

•C 

O  03 

03 

o£ 

03 

£ 

o 

£ 

0)  X 

*r-< 

03 

cr 

r- 

o 

X  £ 

£ 

z 

QJ 

X 

o 

X  . 

cd  x 

X 

in 

X 

cd 

r— 1 

03 

Zs.  x 

i—4 

CM 

Pm 

CO 

X  CO 
X  W 

H  M 

X  06S 

X  X 

<  X 

H  Z 

<  M 

X 


o 

o 


c 

X 

3 

X 


o 


o 


o 


o 


o 

o 


o 

o 


o 


o 


H 

z 

x  x 
O  X 


CD  X  6 

X  £  £ 

-rl/-v  03 

o  cd  o  x  o  x 

ONH  X  OJ  x  CD 

X  CM  U  X  X 

Cd  O  0  Cd  r—4 

>  4-1  — I  X  46  CD 

Cd  WX  X  ^  CL 


0) 


CD  X  /*n  O 

+  00  <D  0)  X  <D 

O  X  03  CMX  x  X 

O  O  Cd  3  xx 

O  m  x  0  <*  cm  cd 

t — i  x  cj  X  cm  wr>-  x 


o 

r-* 


m 

r-* 


cn 

u 

o 

fX 

X 

CM 


H 

z 

PJ 

CM 

0 

X 

X 

X 

• 

QJ  X 

X  QJ 

X 

o 

Pm 

Pi  0) 

pi  aj 

£ 

cd  x 

Pi  QJ 

< 

r--  X 

a  TJ 

Cd  3 

CJ  r£ 

Cd  s 

o 

X 

X  X  cm 
x  £  £ 

CJ  T3 

cd  3 

*r4 

X  o 

X  o 

0 

X  00  O 

X  o 

z  z 

CQ  CM 

PQ  CM 

CQ 

£  X  O 

CQ  CM 

CQ 

CO  * 

X  o 

CO  z 
< 


co 

<r 

CTN 


CM 

in 

in 

as 

r— 1 

p- 

vO 

as 

t— 4 

as 

OS 

so 

QJ  £  O  « 

z 

1 

03  O  X  x 

1 

Q  X 

CJ  »  X 

0  - 

Cd  x  4-J  QJ  O  «*-N 

QJ 

i  £ 

X  4J  Q) 

X  X 

X  X  £  0)  0) 

£  £ 

sD  cd 

JO  03  TJ 

a,  £ 

O  Z  X  W  03 

QJ  £  QJ 

in  x 

£  £  5 

cd 

qj  a  x  qj 

•r4  ‘r4  X 

O  X 

o  cj  o 

O  X 

x  o  ^  aj  x 

-a  £  cd 

CM  QJ 

■3  CM 

r^- 

CO  X 

JD  X  <3-  DON  X 

cd  o  x 

CM 

0) 

1 

1  QJ 

£  X  ■  >,  •  £ 

X  £  X 

rJ  O 

PM  03  OC 

z 

Z  CM 

O  X  X  X  CM  QJ 

£  £  X 

CQ  U 

qc  cd  c 

q  z  m  oo<r  > 

CQ  <  Z 

<  CM 

<  JO  X 

00 

CM 

sO 

CM 

<r 

00 

m 

X 

CM 

r—4 

o 

o 

cn 

o 

CM 

SO 

X 

X 

30 

00 

X 

- 

m  — 

-  * 

El  9 


u 

3 


u 

o 

•i— 1 

5  x 

d  GJ  4-> 

>“•  ■<  * 

c/5 

d 

4-J 

1 

rH  X  d 

4-1 

GJ  i— * 

co 

C  5 

o 

d  i-h  -h 

o 

U  CJ 

QJ 

■rl 

X 

cj 

a>  cuj  -uj 

d  *rl 

4j 

U-I 

l 

a  c  *h 

g 

4H  4l 

aT3  o 

4-J 

d 

O  •d  C 

o 

H  4-1 

g 

QJ 

c 

V-«  CO  *rH 

4_> 

3  i 

o 

a  o 

d 

X5 

a  3 

4J 

05  C 

o 

a  u 

rH 

GJ 

w  d  D 

o 

0 

d  d  rH 

-U 

o  o 

xo 

U  *H 

o 

4i  4-1 

Q) 

d 

GJ  *H 

flj 

•rl 

4-)  4i 

a 

c 

CJ  4-J 

Tl  O 

4J 

CJ 

o 

•r4 

d  QJ  CJ 

c 

05  g 

d 

W  AJ 

u 

E  4-1  5U*H 

d 

d 

X 

•rl  C 

a 

d 

H  d  H 

X  rH 

d 

d  *h 

U  4) 

a;  X  «h 

j  1  rrt 

QJ  d 
•rl  05  U 

•o  tn  O 

GJ  U 
4J  4i  CO 

<  0-t— < 


T3  4h  5^  c 
<  o  o  d 


•rt  C  3J 
50  £ 

C  -H  4J 

o  QJ  QJ 
•H  J-t  X  X 
4J  O  <0 
O  4-1  C  X 
•H  O  05 


4H  C  <U 

4t 

OH4 

a 

c  u  ^ 

e 

4. 

J  'H  0)  H 

o 

0 

d  d  aj  d 

o 

a 

GJ  4J  c  4J 

d 

g  GJ  -rl  CU 

o 

> 

D  4i  & 

•rl 

00  50  1 

4-J 

4-J 

•rl  u3  C  r-l 

d 

c 

r-t  *H  d 

X 

QJ 

d  rH  C/3  4-J 

d 

> 

05  GJ  3  0J 

•rl  rH 

•rl  41  d  e 

T3 

o 

^  X)  o  ^ 

< 

cn 

w  co  ^ 
uco  H 

13b 

H  O 
CO  W 
h  w  o 
Q  W  < 
^  £ 
•  00  < 
x  oo  W 
\  <  £  pi 

S  ^  PQ 


QJ 

C  GJ 

QJ 

x: 

a 

4J  50 

•H  4J  50 

4-J 

S 

d  c 

d  C 

d 

3 

GJ  *rl  -rl 

•rl 

a 

T3  T3 

C0T3  TJ 

T3 

QJ  rH 

d  GJ  rH 

QJ 

4i 

g  *rl 

g 

d 

E  3 

d  e  3 

g 

QJ 

M  JU 

Q  -r IXJ 

M 

c 

CQ 

CO  •  CM 

wo  >-* 

CO  IS  Csl 

<  r-t 


c 

o 

c 

o 

•rl 

•rl 

CA 

05 

o 

o 

rH 

QJ 

rH 

a 

4i 

a 

X 

•H 

X 

w 

W 

w 

05 

X 

05 

O  05 

/-v  TO 

w  a) 

0)  M 

0)  O  O 

o  U  C-  -U  VO 

o  ao  w 

,-t  wr*-  w 


o  50  O  Du 

D  u  . 

•r-t  *H  D 

u  x  o  o 

O  05  O  *H 


CM  X  O  X 


(DCS-*  QJ 
r— I  *1-1  0  a 

xi  ux 
3  cn  £  X 

O  d  O  Q 

Q  CJ  Cu  pti 


C  X  O 
QJ  3  a 
>  O  e 

HU  O 

o  o 
w  ^ 

^  0)  QJ  C 
(fl  W  O 
-4*  gj  d  *H 

r-l  x>  u 


to 

c  u  _ 

•H  (DO 

4-J  TJ  ■ 

05  £  m 
d  o  * 
o  ao 


E20 


buildup  at  interface 
(normal) 

2)  Friction  at  cylinder 
interface  caused  by 


SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  FILLING 


aa  5-s 

4J 

u 

•X 

x  g 

•X  X 

•H  Q 

E  co  in 

O 

a 

4-1 

O  03 

4->  a 

X  CO 

H  U  Is* 

03 

U 

03  g 

U  0) 

X  X 

a 

a 

•X 

a  9 

■X  T-) 

/-N/*N 

E 

£ 

X 

E  X 

X  X 

/-S 

r4  CM 

t— i 

j— i 

X 

M 

X  O 

r4  CM 

1  S 

i 

/-S 

CO 

X  01 

1 

o 

>, 

p . 

i-1 

03  X 

•X 

4J 

4-1 

1  o 

X 

£  O 

"0 

1 

•r-4 

c  C 

03 

CO 

•H 

T— 1  X 

T3 

b£  O  tl 

a 

C  T3 

44  rX 

/•“s 

03  4-1 

•X 

c  U  CO 

b£  01  X 

o  o 

c 

4->  *X 

E 

•X 

to 

•H  *X  <u 

CO 

o 

Q)  3 

T3  3 

i— 1  O  CO 

c 

aj44  a 

4J 

•r4 

£ 

01  X 

-H  4J  W 

•r-4 

x  -x  a 

o  C 

4-4 

^  4-4 

T3 

•n  C  03 

> 

O  03  o 

03  O 

•r4 

U 

C  5 

4-i  'rl  ^1 

o 

4-1  *H  X 

a 

CO 

C  03 

c 

G  O 

X) 

E 

£  1—1 

o 

O  4-1 

o 

O  r-4 

CO  oi 

S-/ 

0  c 

*H  0 

a 

•X  G  4J 

•r-( 

X 

CO  E  X 

C  W-f4 

^  O 

£ 

4-1  O  CJ 

4-4 

bO  - 

03  03  4-» 

C 

0 

4-1 

o 

O  U^-N  03 

o 

G  0) 

x  a  -x 

o 

o  -x  x  a  a  -h 
)  x  n-i  a>  b  c/3  x 
)  -d  X  nj  £  M  X  X 

3  a)  x  £ 

I  'X  QJ 

3  <44  t— I  £  X  CM  i-4  CM 


X  3 

'  QJ 
i— I  X 

Q-O  U 
co  a3  cd 

WH  U 


X  to  * 

O  C/3  H 

§;5b 

H  <J 

C/3  \  jlj 

m  X  C 
Q  X  < 

M  £ 

•  CO  < 

><  c/3  x 
5  M  & 
^  S  CQ 


x 

Pm 

>- 

H 

-r4 

X 

1 

c 

G 

c 

C 

c 

c 

c 

G 

c 

c 

1 

o 

O 

o 

c 

0 

o 

0 

0 

O 

o 

o 

c 

c 

c 

H 

*1-1 

*r4 

•r4 

o 

*r4 

•H 

•X 

•i-4 

•H 

•H 

•H 

0 

0 

o 

X 

CO 

CO 

CO 

•X 

CO 

CO 

CO 

CO 

CO 

CO 

CO 

•r-4 

*r4 

•r4 

PL 

O 

O 

O 

4-4 

0 

O 

O 

o 

O 

0 

O 

co 

CO 

CO 

H 

H 

r-4 

T— f 

O 

H 

.— t 

1—1 

r- 1 

i-4 

r— 4 

O 

0 

o 

X 

a 

cl 

a 

03 

cl 

a 

CL 

0- 

a 

a 

a 

r-4 

—4 

1— t 

O 

X 

X 

X 

01 

X 

X 

X 

X 

X 

X 

X 

CL 

a 

CL 

x 

x 

x 

X 

w 

x 

x 

x 

x 

x 

w 

X 

x 

X 

x 

X 

x 

X 

03 

C 

01 

£ 

03 

a 

c 

CD 

c 

bO 

CL 

C  E 

x  c 

i 

2 

o 

03 

o 

C 

G 

CL 

0 

01  o 

C 

J4  34 

c 

C 

H  O 

4-> 

O 

•r4 

o 

•H 

o 

•H  in 

CL-r4 

O 

CD  C 

o 

O 

2  H4 

aj 

O 

4-J 

•H 

T3 

X 

4->  r*- 

O  CO 

•r4 

>  4-J 

0) 

•r4 

♦H 

X  H 

’U 

3 

03 

4-1 

03 

03  t-i 

3 

4-1 

O  03 

c 

4-J 

4-J 

U 

03 

'  O 

bC 

U  bOrM 

bC  34 

03 

r-4 

•»  c 

•H 

03 

03 

o  c2 

tn 

o 

a> 

V4 

XI 

G 

Q1  C  a) 

C  ^ 

34 

—4 

O 

X 

X  1-4 

X 

X  W 

c  ^ 

4J 

CL 

01 

1 

•r4 

Cl  *<-4  X, 

•H  X 

01 

01 

44  u  U 

u 

0)  3 

01 

£  p^ 

•H  03 

c 

O 

CL 

c 

iM 

O  r-4  CO 

r-4  X 

CL 

X 

O  01  O 

03 

ao^ 

X 

o  o 

3-1 

*r4 

O 

o 

—1 

i-4 

o 

OQ  c 

X  4-> 

S 

OXT3 

o 

CJ 

3-4  4J 

3-i 

•H 

•r4 

3-4  -r4  CO 

•r4  34 

•O 

$4  03 

01 

04 

bO 

ai 

bfl 

4-1 

Cu 

0)  C4-4  03 

X  o 

bC 

b0*r4 

01  c  }-l 

bC 

bC  ^  lj 

bC 

tM  O 

C 

U-i 

C 

O 

44  bO 

1  4-1 

G 

C  41 

u-i  xj  ai 

C 

C  — »  03 

G 

CO  4-1 

*r4 

CO 

CO 

•r4 

ai 

CO  34 

•r4 

■r4  03 

co  a>  cl 

•r4 

•r4  CL  G 

•rH 

c 

*G 

C. 

i-4 

CL 

01 

C  <D  * 

01  G 

rH 

T3  }4 

G  r-l  o 

h  a  o 

r-l 

03  J-i 

03 

cd 

03 

r-4 

CO 

J-I 

03  4-1  w 

34  O 

r— < 

03  01 

03  i—4 

03 

i-4  2  4-J 

u  o 

o 

3-4 

3-i 

•r4 

c 

u 

J-I  44  . 

O  -r4 

•H 

o  a 

)4  *r4  >N 

O 

•H  CO  0) 

•r4 

H  4-1 

-J 

4-1 

H 

M 

to 

H  03  X 

C/3  4-1 

tu 

X  Q 

XI 

X  ^T3 

X 

G 

X 

C 

•X 

o 

•H 

<d 

03 

03 

X 

01 

X 

bO 

bC 

in  c 

CM 

2  tn 

i—l  *X 

in  X 

m  x 

x  ca 

»  03 

o 

»  u 

CM  O 

o 

o  X 

un  x 

m 

m  03 

l  03 

o 

X  ^ 

b0 

?— i 

i-4  QJ 

CO  oi 

m 

< 

01 

4-1 

CO 

03 

vO 

r— 4 

*  C 

CM 

CO 

t— 4 

co  X 

/— N 

\  CO 

CJ 

01 

X  CL 

X 

<  X 

4 

1 

X 

o  >> 

£ 

O 

CO  i-4 

CO 

C/3 

4-1  4-1 

o 

C  4J 

x  r*. 

01 

03  X 

CQ 

•r4  03 

01  CO 

03 

« 

H 

c 

S-r 

03  c 

4-> 

03 

c 

2 

O  T) 

X  o 

•X  • 

C 

•X 

X 

44  Ol 

H 

&c  4-j 

C  X 

01 

o 

01  01 

2 

01 

bC  • 

X 

m 

<c 

a  x 

H 

m  Q 

M  X 

CJ 

r— 4 

O 

03 

O 

O  X 

CM 

o 

O  O 

m 

CM 

CM  X 

r4 

c- 

/-S 

1 

o 

o 

o 

o 

co 

C  03 

m 

CM 

Mf 

■n 

1 

X 

•  x  *x  c 

\ 

\ 

1  o 

C  03  O 

o 

o 

o 

o 

01 

01  4-1 

01  01  X  x 

m 

00 

\o 

•n 

-a 

~5  03 

tj  E  be  ai 

N— ✓ 

•X 

01 

*x  C 

•X  01  T> 

N  < 

D 

M  O 

N  X  \D 

i—4 

i-4 

i-4 

i-4 

< 

•H 

<  X 

<  tl  •  • 

o 

O 

O  CJ 

o 

£ 

01 

C«3> 

4-1 

4-1 

4-»  O 

4-1 

T3  CL 

03 

~D  Q 

X3  -X 

co 

03 

03 

03  O 

03 

03  £ 

c 

03 

03  X  CM 

X 

E 

£ 

E  o 

£ 

01  O 

£ 

01  X 

01  x  o  ♦ 

0 

< 

< 

<  r4 

< 

X  CJ 

n 

X  CJ 

X  X  Xi  < 

X 

d 

o 

a 


o 

2 


o 

2 


o 

Q 

W 

oP 

eP 

X 

U 

o 

o 

PC 

o 


cn 

H 

Z 

w 

o 

M 

O 

CJ 

<C 

Q 

W 

H 

X 

W 

X 

W 

cn 


c*- 

O 


w 

cn 

PD 

< 

u 

w 

hJ 

32 

< 

03 

O 

oP 

a- 


-X 

M 

o  E 

CD 

4-J 

O 

a 

4J 

2  0 

4J 

co 

P 

c0 

CL 

C  'r4 

r-l 

•H 

O  E 

a 

X 

c~ 

E  ^ 

D 

C  r-4 

CD 

c 

a  <d 

O  CD  CO 

XJ 

•rl 

4-J  DC 

•rt  U 

U-l 

4-J  d 

D  (13  'Ll  /-S 

pj 

UM 

CO  X 

•rl  *41  0  Ci 

tc 

tO 

i  y 

c  u  0 

U 

tc  o 

be  a)  c  lj 

c  ^ 

CO 

c  rl 

tI  U  O  Cfl 

CD  CD 

CL 

•H  X 

C  T-f  C 

CD  LJ. 

a 

D-H  D  C 

^  CO 

c 

CL  0-i 

cn  >-i  -u 

iJ  1-H 

•H 

tO  O 

PJ  CD  <D  0) 

<d  a 

i~> 

>  cn  x) 

X* 

Vj 

^  c 

^  CD  C 

w  (1) 

CD 

o 

CD  -H  0 

bC 

X 

C  -H 

CH^D 

C  ^ 

C  4J 

O  cn  c 

O  CO 

0  ’ 

*h  a 

•H  ^  4-J  *H 

•H  JP 

a 

JJ  D 

±j  a)  a 

u  u 

a  ci 

a  t— i  co  >— i 

a 

•H 

•H  z  CL*H 

XJ 

o 

d  — i 

M  co  g  o 

V4  C 

cn 

ti,  X 

fn  U  H  U-C 

tii  CO 

w 

QJ 

4-J 


CO 

i—4 

Q 

bC  CL 

cn 

C 

w 

•H  CD 

C  bfl 

/*s 

c 

P 

CO  Vj 

cn 

o 

0 

CD  CO 

•w 

♦H 

1—4  rC 

- 

4J 

4-J 

u  o 

4-J 

cO 

CO 

O 

a 

u 

4-J  C 

CO 

•H 

•H 

CO  0 

d- 

*4-1 

U-l 

g 

•H 

•H 

LJ  C 

M 

a 

O 

CL-H 

CD 

CD 

g  a 

^r- s 

a 

CL 

CD 

4-1  X 

CM 

cn 

cn 

4-J  4-J 

- 

O 

O 

CO  *>“I 

c 

z 

Z 

w  ^ 

o 

•H 

1 

I 

c 

C  0) 

4-4 

0 

0  bfl 

O 

c 

c 

•H 

•i-i  cO 

•H 

3 

3 

4-J 

4-J 

o 

O 

a 

U  CJ 

fj-t 

p 

c 

•H 

•H  O 

rX 

V4 

U  r-t 

y-s 

P 

c 

ts* 

U*  X 

»—4 

ZD 

ZD 

p 

p 

c 

o 

o 

o 

*H 

•i-4 

■rl 

4-J 

4-J 

4-J 

CO 

CO 

CO 

u 

O 

/— s 

o 

•H 

•H 

X 

•rl 

*4-4 

*4-1 

CO 

*4-4 

•rl 

•H 

J-4 

•r4 

O 

U 

4-> 

U 

CD 

0) 

CD 

a 

CL 

X 

CL 

cn 

cn 

CD 

cn 

CL 

O 

O 

a 

O 

z 

Z 

o 

Z 

u 

1 

I 

X 

t 

'w' 

w  cn  ■ 

Z  <  fx< 
<c  t-J  w 
H  O 
cn  X 
^  W  O 
Q  X  < 
bP 

•  02  < 
X  on  U4 
<H0i 
2  Z  03 


Uj 

Pu 

>< 

H 


H 

X 

Cd 

H 


DP 

o 

z 
H  O 

2  M 

W  H 


§2 
PL  X 

Z  ^ 
o  o 
o 


c 

c 

c 

o 

0 

o 

•H 

•t-4 

•rl 

cn 

cn 

cn 

O 

O 

O 

T— 1 

r-t 

i—4 

a 

CL 

CL 

X 

X 

X 

w 

w 

w 

c 

c 

o 

o 

CD  CD 

•H 

•H 

C  4-J 

4-J 

4_j 

•r-t  3 

CO 

CO  CD 

X  X 

L4 

U  bC 

o  u 

CD 

CD  }-i 

CO 

CL 

CL  CO 

Z  >> 

o 

O  X  P 

u 

o  o 

bfl  CD 

bC 

bo  *rf 

C  > 

C 

C  V4  cn 

•r4  *r4 

•H 

•h  a)  o 

i — 1  r^ 

i—t 

r-4  CLi — 1 

i—4  CD 

r— 1 

r-t  a  CL 

•H  X 

•rl 

•rl  O  X 

[x-  ^ 

fcptd 

CD 

u 

‘T— I 


<D 

cn 

D 

O 

4P 

i 

-X 

u 

cO 

CL 


p 

P 

C 

o 

o 

o 

•H 

•rl 

•H 

cn 

cn 

cn 

o 

o 

O 

r— 1 

CD 

r-4 

r-t 

a 

U 

a. 

a 

X 

•iH 

X 

X 

w 

u* 

w 

w 

c 

c 

c: 

o 

o 

o 

•H 

•rl 

•rl 

4-J 

4-> 

4J 

cO 

CO 

CO 

U 

u 

Ct 

CD 

CD 

CD 

p . 

— i 

CL 

a 

o 

r-4  C 
•H  O 

o 

o 

bO 

ft.  *rt 

bO 

bC 

C 

1  4-> 

C 

C 

•rl 

X  CO 

•rl 

•rl 

X 

bO  M 

r— 1 

—1 

CO 

•rl  CD 

i— 1 

t—4 

O 

a)  a 

•rl 

•rl 

•-3 

^  o 

Pn 

oj 

u 

pl 


C 

p 

IP 

c 

c 

C 

O 

o 

o 

o 

o 

O 

•rl 

•rl 

•rl 

•rl 

•rl 

•rl 

cn 

cn 

cn 

cn 

cn 

cn 

o 

O 

o 

0 

O 

O 

i—4 

rl 

rl 

1-1 

1-^ 

H 

CL 

a 

a 

a 

a 

a 

X 

X 

X 

X 

X 

X 

w 

w 

w 

w 

w 

c 

o 

•rl 

4J 

w 

rl 

Cl 

Cl 

CO 

M 

CO 

CD 

ID 

u 

CD  CD 

>  Cl 

X 

CL 

o 

CD 

cl  cn 

O  CD 

CD 

CL 

4-J 

CL 

CL  bC  CO 

g  T3 

CD 

O 

IP 

O 

O  IP  JC 

CD  (P 
DP  ID 

ft, 

pc  p 
i  o 

•rl 

Ci 

Z  -rl  PU 
Ct 

■  rl 

P 

bC*rl 

bC  Cl 

CD 

d  3  be 

(D  PQ 

O 

P  4-J 

IP  CD 

Li— i 

O  X  IP 

bO 

u 

•H  CO 

•rl  X 

cn 

U  1  -rl 

Ct  g 

4-> 

rl  Ct 

CL  C 

C 

4-J  r-4  CL 

CO  O 

P 

i— 1  Q) 

E  <D 

tO 

o  i 

X  u 

X 

•rl  a 

3 

Ct 

u  *41 

cn 

Pu  O 

a  co 

H 

cn  co  Q 

on 

W  cn 

l—t  CjJ 


H  M 
M  OP 
t-J  PD 

<  X 

H  2 

<  M 

U- 


CM 


O 


H 

Z  ^ 

x  <n 

O  03 

Z  X 

<  W 


CO 

Cl 

b£ 


m  X 
i  a 
o  co 

CM  CD 


I 


to 


c 

1 

o 

o 

C  4-J 

4-J 

•H  CD 

0) 

H 

cO  X 

Q 

Cl 

Z 

u 

cn 

<D 

Z 

bCM 

Ct 

r^. 

U 

o 

I 

o 

r— 4 

CO 

< 

5 

A 

4J 

z 

IP 

PQ 

cn  • 

w  o 

CO 

i—4 

cn  z 

o 

CM 

< 

vD 

vD 

o 


o 


o 


o 


o 

o 


o 

o 


o 

o 


o 

o 

o 

o 


0) 

X 

•rl  • 

N  W 
<  • 
a 
X 


cn 

u 
o 

C  4-» 
•H  tO 
CO  d 

u  o 

CO  X  bC  4-> 
CD  C  CD 
X  tO  vO  X 


<D 

4-J 

•H 

§ 

& 

Q 


vO 

Ov 

cn 

CO 

vO 

vO 

cn 

d 

•rl 

<0 

u 

ao 


-X 

cn 

to 


O 

O 


m 

rl 

CM 

rl 

in 

cn 

<D 

cn 

Xi 

CD 

X 

Ci 

g 

X 

•rl 

o 

o 

*H 

P  4-> 

03 

N 

< 

•rl  CO 

< 

CO  p 

X 

X 

Ct  o 

cn 

X 

cO 

bC  U 

co 

CO 

<D 

CD 

r-4 

CD 

vO  X 

Pi 

c«*  X 

vO 


Mf  CJ\  CO 

t/~\  LO  MD 

X>  vO  vO 


rtf< 

CM 


bO 

e 


O 

CM 


4-J 

-  Jn 

X 

CD 

P 

E  X 

•r-4 

X 

CD 

co  cn 

P  4-J 

z 

•h  cn 

c 

rl  4-J 

•H  W  CD 

o 

N  Jd 

•H 

CD  C 

d  4-j 

cn  U 

<  cn 

Ct 

E 

. 

OP  >v  <D 

o  -  to 

rl  CD 

CO 

OJ 

3 

CL 

CO  g 

U  X  4-» 

E 

X  rl 

E 

i—4 

g 

1  rl  d) 

Cl  CO  CD 

X  -H 

CO  *41 

•rl 

1-1 

o 

CM  CD  rl 

•rl  CD  O 

O  L4 

CD 

Cl 

f-1  o 

z  a  w 

z  cc 

X  X 

cl 

/-V 

<<— V 

/-V 

H 

H 

H 

S-/ 

'w' 

s_x 

<r 

rl 

in 

av 

o 

OO 

o 

r^ 

r^- 

00 

Ov 

ON 

CM 

co 

co 

co  « 

-m 

m 

i—4 

r— 1 

nH  ^ 

rl 

v-i 

E22 


SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  FILLING  (cont) 
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WHICH  OCCURRED  DURING  FILLING  (cont) 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  FILLING  (cont) 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  FILLING  (cont) 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  FILLING  (cont) 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  FILLING  (concl) 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  MIXING 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  MIXING  (cont) 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  MIXING  (cont) 
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ACCIDENTS  WHICH  OCCURRED  DURING  MIXING  (cent) 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  MIXING  (cont) 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  MIXING  (concl) 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  MAINTENANCE 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  MAINTENANCE  (cont) 
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f 


i  3 

3  O 

3  AJ 

CL 

a  to  c 

o  CO 

3 

X 

X  O  -rlM 

aj  c 

X  X 

r— 1 

CO  3  £  co  O 

qj  o 

o 

X  C 

*rH 

i — i  QJ  3  3 

CO 

-a  aj 

AJ 

•H  ro 

3  X 

X  4_>  X  co  3 

QJ 

w 

OJ 

3 

X  H 

*r4  3  0  0 

4J 

AJ 

CO 

3  T3 

3 

X  CD 

CO 

1 — 1  c  Qj  4J  0  -3 

3 

O 

X 

CD  ' 

O 

o 

3  ? 

CD  60  3  to  a  AJ 

co 

3 

< 

£ 

•r-4 

AJ  CD 

CD 

AJ 

u  *L  -rl  3  a)  3  tc 

3 

CL 

cj 

•3  C 

3 

CO  *3 

CD  CD 

CO 

AJ  L  3  Li  .H  »J 

a 

£ 

3  o 

a 

qj  a 

3  N 

CD 

CO  QJ  QJ  -rL  D  AJ 

33 

•rL 

pa 

CLX 

X 

AJ  3 

X 

1  3  O  3  3  00-3 

3 

X 

AJ  X 

3 

QJ  L-« 

3 

3 

C  -3  X  CD  X  c 

0 

AJ 

CQ 

^  to 

<D 

X  0 

X 

O 

O 

1—4 

o  X  >,33  QJ  *H 

U 

3 

< 

•H 

3  ^ 

to  £ 

"3 

•3  4-J 

*i-l  co 

CO 

•H  CJ  t£)  U  L  C 

CD 

CQ 

c 

3 

3  ±j 

3  60 

3 

3  3 

AJ  O 

4J  X 

3 

aj  co  o  o  o  *r-i  d*: 

0 

4J 

O 

o 

0 

o  -3 

u  c 

0  3 

O  co 

CO 

O  3 

o  3 

O 

CJ  £  3  CL  CO  X  CJ 

Lt 

u 

oc 

•H 

•H 

•H  c 

OJ  *3 

•3  (D 

•3 

X 

•rL  CL 

•3  co 

•rL 

•3  4J  CL  O  0 

4J 

QJ 

CL 

AJ 

4-) 

AJ  -3 

CO  » — 1 

4->  CD 

AJ  CD 

3 

3  £ 

3  CL 

AJ 

3  3  *3  3  £  co  X 

*r4 

> 

O 

O 

O 

r— i 

O  5  X 

CJ  X 

CD 

Pl  x 

Cl  CO 

U 

Pl  0  3  0  H  E  co 

3 

33 

*3 

*H 

X  3 

AJ  *3 

•3  AJ 

o 

•H  CO 

3 

•rL 

3 

3 

3 

5-1  0 

o  u 

3  0) 

o 

3  X  X 

/'— V  /-s. 

3 

✓— s 

3 

Pl 

Cl 

pL  AJ 

C  T> 

Pl  ,3 

AJ 

Pl  X 

4-1 

X  CM 

iX  CNJ 

Pl 

X  CM 

LL 

w  w  * 

U  OOH 
2  <  ^ 

<  X'-' 
H  O 

cn 

h  pa  O 
•  co  < 

X 

<  M 

S  s« 


c 

o 


pa 

CL 

>i 

3 

3 

3 

3 

3 

3 

CO 

o 

i— L 

3 

3 

H 

0 

0 

O 

0 

O 

o 

CL 

0 

0 

i 

■rL 

•rL 

•rL 

mrA 

-rL 

'•H 

X 

•r4 

•H 

H 

CO 

CO 

CO 

CO 

CO 

CO 

pa 

co 

CO 

33 

O 

0 

0 

o 

o 

O 

i 

o 

0 

CL 

i — 1 

r— < 

?— L 

r— 4 

r-L 

t— L 

QJ 

QJ 

r-L 

r— L 

H 

CL 

CL 

CL 

CL 

CL 

CL 

u 

3 

CL 

CL 

33 

X 

X 

X 

X 

X 

X 

•rL 

•rL 

X 

X 

O 

w 

PJ 

pa 

pa 

pa 

pa 

Pa 

P-. 

pa 

pa 

l 

1 

i 

X 

i 

a; 

3 

2 

i— l 

CO 

CO 

60 

3 

CO 

i 

3 

3 

La  ° 

£ 

i — l 

3 

3 

3 

CD 

3 

CO 

•3 

QJ 

£ 

‘rL 

QJ 

QJ 

o 

CJ 

QJ 

3 

X 

CL 

Is 

3 

3  CD 

CL 

CL 

3 

CO 

CL 

QJ 

CJ 

O 

33  3 

O 

O 

z 

3 

0 

a 

CO 

ClO 

60 

•3 

600 

4-J 

o 

E 

60 

£  w 

3 

CO 

3 

QJ  X 

60 

60 

3  CM 

60 

60 

3 

&  CL 

•rL 

Lt 

•rL 

4J  O 

3 

3 

•H 

X 

3 

60 

•3 

S  o 

3 

CD 

3 

CO  cO 

•rL 

•r-4 

3  AJ 

CJ 

■rL 

3 

3 

r-L 

o 

u  aS 

•rL 

U 

*r-l 

CO 

£  £ 

l—l 

rH 

•3  QJ 

3  QJ 

r— 1 

•r4 

•3 

X 

u 

X 

CO 

3 

i-L  3 

1  C 

X  *3 

cO  X 

r-L 

3 

AJ  3 

AJ 

O  3 

O 

CJ 

*H 

CJ 

CD 

CD  60 

•H  O' 

•rL  O 

CJ  r-L 

3  3 

■3 

o 

AJ  O 

4J 

X  0 

CO 

AJ 

tO 

3 

X  3 

3  tL  '? 

3  -3 

CO  -3 

O  CO 

3 

*r4 

3  -3 

3 

QJ  -3 

2 

CO 

2 

CL 

H  'rL 

a  4J 

a  4J 

2  X  E  r-L 

a 

4J. 

CJ  4-) 

CJ 

cd  AJ 

CO 

PJ  CO 
X  W 
H  M 
!— t  Otd 
X  3 
<  •“> 
H  2 

<  M 


O 

o 


o 

o 


o 

o 


o 

CO 


o 

o 


o 

o 


H 

2  ^ 
X  CQ 
O  X 


H 

2 

W 

o 

< 


co 

CO 

<d 

X  3 
QJ  QJ 
M  T3 
O  3 

6  o 

CO  CL 


X 

on  • 

CAL 

X 

pa  o 

m 

in 

CM 

cn  2 

m 

m 

CTn 

< 

m 

X 

AJ  CO 
•H  AJ 

c  o 

•H  AJ 


m 

■w 

in 

CM 

X  00 

<r 

X 

r^ 

as 

m  <r 

m 

QJ 

> 

o 

•3 

• 

CO 

OJ 

i  S 

o 

AJ  1 

O  0 

o 

«-L 

tO  O 

3  a 

X 

CL 

£  CJ  3 

a 

X 

to 

3  O  CL  AJ 

AJ 

CQ 

QJ 

3 

•3  rH  C 

LJ  3 

QJ 

3  X  -3  co 

qj  co 

CL 

6 

O  CJ  *3  *3 

X  x 

£ 

PJ 

X 

•3 

£  3  rL  rL 

CJ  x  3 

O 

CQ 

3 

E  QJ  O  QJ 

O  QJ  QJ 

CJ 

X 

CL 

CL 

<  CL  CO  CL 

DC  CL  *3 

/— s 

*3 

Csl 

o\ 

<* 

O 

N-/ 

P- 

m 

as 

as 

MT 

ra 

CO 

CO 

X 

cn 

O 

CO 

i-H 

4 

m 

r—4 

X 

3 

X 


>s 

3  QJ 
3  aj 
CJ  (0 
3  c 

CD  -H 


s  e 


m 

uo 

X 


E43 


1038  TPH  8126  total  1/2  Bandsaw  Explosion-Fire  12  ft/-  Ignition  of  propellant 

composite  7  fines  in  lower  guide 

propellant  blocks  of  bandsaw  fric¬ 

tion 


SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  EXTRUSION 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  SCREENING 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  STORAGE 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  DRYING 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  DRYING  (cont) 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  IN  REACTORS  (concl) 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  SOLVENT  RECOVERY  AND  IN  ACID  CONCENTRATORS 
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SUMMARY  OF  SELECTED  ACCIDENTS  WHICH  OCCURRED  DURING  WASHING  OPERATIONS 
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LIST  OF  SYMBOLS 


2 

A  -  surface  Area  (m  ) 

a  -  significant  dimension  in  thermal  explosion  model  (cm) 

C  -  specific  Heat  (cal/g°k) 

C  -  capacitance  for  ESD  calculations  (farads) 

E  -  activation  energy  (cal/mole) 
e  -  impact  energy  per  unit  area  (joules/m  ) 
e  -  energy  stored  in  electric  field  (joules) 

H  -  distance  from  center  of  equivalent  sphere  to  grounded  wall  for  ESD 
calculations  (m) 

i..  charging  current  (amps) 

k  -  dielectric  coefficient  (dimensionless) 

1  -  separation  distance  for  ESD  calculations  (m) 

M  -  mass  (Kg) 

m  -  mass  flux  (kg/sec) 

N  -  normal  force  for  frictional  heating  (Newtons) 

P  -  probability  (dimensionless) 

Q  -  heat  of  reaction  per  unit  mass  (cal/g) 

Q  -  electrical  charge  for  ESD  calculations  (coulombs) 

R  -  gas  constant  (cal/mole°k) 

R  -  electrical  resistance  (ohms) 

R  -  equivalent  radius  of  sphere  for  ESD  calculations  (m) 

T  -  critical  temperature  below  which  conductive  heat  transfer  is  adequate  to 

c  remove  heat  produced  inside  the  body  of  explosive  by  exothermic  reaction 
(°k) 

T  -  boundary  temperature  in  thermal  explosion  model  (°k) 

t  -  time  (sec,  min,  or  hr) 

te  -  time  to  explosion  (sec,  min,  or  hr) 

V  -  voltage  (volts) 

W  -  path  width  for  surface  resistance  ESD  estimates  (m) 

Z  -  pre-exponentrol  factor  (sec"^) 

S  -  shape  factor  in  thermal  explosion  model  (0.88  for  slabs,  2.00  for 
cylinders,  and  3.32  for  spheres) 
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e  -  permittivity  of  free  space  (8,85  X  10  C0-U^ ?  ) 

0  nt-ni 

x  -  thermal  conductivity  (cal/cm°k  sec) 

p  -  mass  density  (g/cc) 

6  -  surface  resistivity  (ohm) 

t  -  characteristic  electrical  relaxation  time(sec) 

Subscripts 

max  -  maximum 
in  -  input  flux 
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